Mandiant researchers have uncovered active exploitation of a zero-day vulnerability in the Gladinet Triofox remote access and file-sharing
The post Mandiant: Triofox Zero-Day Exploited to Gain SYSTEM Access via Antivirus Feature appeared first on Penetration Testing Tools.
Spyware applications secretly installed on Android devices continue to pose a stealthy and insidious threat to victims of
The post Stalkerware Crisis: Most Android Antivirus Apps Fail to Detect Hidden Surveillance appeared first on Penetration Testing Tools.
A new tool, DonPwner, has been released publicly — a utility for credential analysis and the automation of
The post DonPwner: New Dual-Use Tool Automates Credential Attacks on Role-Based Active Directory appeared first on Penetration Testing Tools.
The Linux Kernel developers are preparing to enable Microsoft C Extensions support during kernel compilation. Two patches recently
The post Linux Kernel Readies to Adopt Microsoft C Extensions for ‘Cleaner’ Code appeared first on Penetration Testing Tools.
A North Korean–linked hacking campaign attributed to the KONNI cluster has executed a string of targeted attacks against
The post KONNI Hackers Weaponize Google’s Find My Device to Remotely Wipe Android Phones appeared first on Penetration Testing Tools.
A new open-source project named NoMoreStealers has just debuted on GitHub. Presented as a proof-of-concept defense for Windows
The post NoMoreStealers: New Open-Source Tool Protects Windows Data via Kernel MiniFilter appeared first on Penetration Testing Tools.
SigmaOptimizer is a End-to-End Sigma rule generation and optimization tool that automatically creates, tests, and improves Sigma rules based on real-world
The post SigmaOptimizer: End-to-End LLM Tool for Automated Sigma Rule Generation and Testing appeared first on Penetration Testing Tools.
The APT-C-60 group, previously linked to targeted attacks against Japanese organizations, continues to employ its signature methods—blending proven
The post APT-C-60 Returns: New SpyGlace Malware Hides in Fake Resume VHDX Attachments appeared first on Penetration Testing Tools.
The uutils team has unveiled Rust Coreutils 0.4.0 — a new release of the system utilities written in
The post Rust Coreutils 0.4.0 Released: 85.8% GNU Compatibility & Major Performance Boosts appeared first on Penetration Testing Tools.
A new iteration of the RondoDox botnet has been uncovered, exhibiting a dramatic escalation in both scale and
The post RondoDox Botnet V2 Escalates: 75+ Exploits Target IoT and Enterprise Systems appeared first on Penetration Testing Tools.
U.S. authorities are reportedly preparing to ban the sale of routers and other network equipment manufactured by TP-Link
The post US Ban on TP-Link Routers Imminent Over China Ties and Cyber-Espionage Fears appeared first on Penetration Testing Tools.
The Taiwanese company QNAP has released updates for its systems addressing seven zero-day vulnerabilities unveiled by participants at
The post Critical RCE Zero-Days Patched: QNAP Fixes 7 Flaws Exposed at Pwn2Own 2025 appeared first on Penetration Testing Tools.
Independent researcher and cybersecurity specialist Lukasz Olejnik has detailed in his blog the intricacies of a forthcoming legislative
The post The End of Cookie Banners? EU Draft Law Puts Consent Control in Your Browser appeared first on Penetration Testing Tools.
Hackers have released what appears to be the largest data breach in the history of Chinese cybersecurity —
The post Global Targets & Secret Tools: Massive Leak Exposes China’s Knownsec Cyber-Intelligence appeared first on Penetration Testing Tools.
Microsoft has revealed a new side-channel attack targeting remote large language models, allowing a passive adversary who merely
The post Microsoft revealed Whisper Leak: Attack Inferred Encrypted AI Chat Topics with 98% Accuracy appeared first on Penetration Testing Tools.
MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks
The post MAD-CAT: Simulating Data Corruption Attacks on MongoDB, Elasticsearch, & More appeared first on Penetration Testing Tools.
GDIOCSpider is an open-source, configurable, Python Incident Response (IR) and Security Research tool specifically catered around IOC extraction and
The post GDIOCSpider: The New Open-Source Python Tool for GDrive Incident Response appeared first on Penetration Testing Tools.
Microsoft is testing an accelerated version of its Quick Machine Recovery (QMR) feature alongside an updated iteration of
The post Microsoft Speeds Up Windows Recovery (QMR) & Allows Smart App Control Toggle appeared first on Penetration Testing Tools.
Researchers discovered several NuGet packages in the public registry that conceal covert sabotage code scheduled to activate in
The post 2027 Time Bomb: Covert NuGet Packages Target SQL and PLCs with Scheduled Sabotage appeared first on Penetration Testing Tools.
Helping companies negotiate with ransomware gangs has always seemed like a peculiar business. In theory, one mediates with
The post From Ransomware Negotiator to Cybercriminal: Inside the $1.27M BlackCat Heist appeared first on Penetration Testing Tools.
