Google has officially unveiled a new experimental feature within its search engine, enabling users to delegate the task of calling local businesses to artificial intelligence and receive relevant information without any direct involvement. Instead...
The post Google’s AI Now Calls Businesses for You: A New Era of Search Automation or Digital Noise? appeared first on Penetration Testing Tools.
Following a sweeping law enforcement operation in May—which dismantled over 2,300 domains and disrupted portions of its infrastructure—the malicious Lumma platform is once again exhibiting a resurgence in activity. Despite the significant blow, the...
The post Lumma Stealer Resurfaces After Takedown: New Stealth Tactics Target Users Via Fake Cracks, CAPTCHAs & GitHub appeared first on Penetration Testing Tools.
China’s Ministry of State Security has issued two high-profile warnings, alleging the deliberate implantation of backdoors into both software and hardware components—across terrestrial and coastal infrastructure. The warnings span a broad spectrum of threats,...
The post China Alleges Widespread Foreign Backdoors in Software, Hardware, and Subsea Espionage appeared first on Penetration Testing Tools.
VulnLab A web vulnerability lab project developed by Yavuzlar. Vulnerabilities SQL Injection Cross-Site Scripting (XSS) Command Injection Insecure Direct Object References (IDOR) Cross-Site Request Forgery (CSRF) XML External Entity (XXE) Insecure Deserialization File Upload...
The post VulnLab: web vulnerability lab project appeared first on Penetration Testing Tools.
A newly evolved strain of the Coyote banking trojan has adopted an unconventional method of user surveillance on Windows systems. Malicious actors have learned to exploit Microsoft’s UI Automation (UIA) framework—originally designed to aid...
The post Coyote Banking Trojan Exploits Microsoft UI Automation for Stealthy Credential Theft appeared first on Penetration Testing Tools.
Mexican organizations remain the persistent targets of an enduring cybercriminal campaign involving modified versions of the AllaKore RAT and SystemBC malware. According to analysts at Arctic Wolf Labs, the attacks are orchestrated by a...
The post Greedy Sponge Targets Mexico: New AllaKore RAT & SystemBC Campaign Evades Detection appeared first on Penetration Testing Tools.
mx-takeover mx-takeover focuses on DNS MX records and detects misconfigured MX records. It currently supports three-technique. These are, MX domains that will expire soon Unregistered MX domains Domains that point to not currently in...
The post mx-takeover: detects misconfigured MX records appeared first on Penetration Testing Tools.
Security researcher Sergey Bliznyuk of Positive Technologies has published a detailed analysis of critical vulnerabilities in the VGAuth component of VMware Tools, which enable a low-privileged local user to gain full SYSTEM-level access on...
The post Flaws in VMware Tools VGAuth Allow Local SYSTEM Privilege Escalation on Windows Guest Machines appeared first on Penetration Testing Tools.
The Paris Prosecutor’s Office has announced the arrest in Ukraine of an alleged administrator of the Russian-language forum XSS.is, a site long recognized as one of the largest hubs of the cybercriminal underworld. The...
The post Kingpin of Notorious XSS.is Cybercrime Forum Arrested in Ukraine After Europol-Led Sting appeared first on Penetration Testing Tools.
Open-source software forms the bedrock of today’s digital infrastructure, powering 77% of all applications and valued at over $12 trillion. Yet its widespread adoption renders it an increasingly attractive target for supply chain attacks,...
The post Google Launches OSS Rebuild: A New Weapon Against Open-Source Supply Chain Attacks appeared first on Penetration Testing Tools.
Microsoft has confirmed that three China-linked threat groups were behind the recent wave of attacks targeting on-premises SharePoint Server installations. According to the company’s report, since early July, the vulnerabilities identified as CVE-2025-53770 and...
The post Microsoft Confirms China-Backed APTs Actively Exploiting SharePoint Zero-Days (CVE-2025-53770, -53771) appeared first on Penetration Testing Tools.
A newly uncovered malicious campaign involving the infostealer DeerStealer has been identified by researchers at ANY.RUN. Threat actors are employing a sophisticated tactic—combining Windows shortcut files (LNK) with trusted system utilities known as Living-off-the-Land...
The post DeerStealer: New Malware Uses Stealthy LNK & LOLBins for Undetectable Data Theft appeared first on Penetration Testing Tools.
In 2023, one of the United Kingdom’s oldest transport companies—established 158 years ago—declared bankruptcy following a devastating ransomware attack. The cyber assault brought the operations of Knights of Old (also known as KNP) to...
The post Weak Password Destroys 158-Year-Old UK Transport Company: Akira Ransomware Claims 700 Jobs appeared first on Penetration Testing Tools.
Recently uncovered critical vulnerabilities in Cisco’s infrastructure are already being actively exploited by malicious actors to compromise corporate networks. The company has officially confirmed that its Product Security Incident Response Team (PSIRT) has observed...
The post Cisco ISE Critical RCE Zero-Days (CVSS 10.0) Actively Exploited In The Wild – Patch Immediately! appeared first on Penetration Testing Tools.
The British government has announced its preparation for a bold and decisive move in the fight against cybercrime—a sweeping ban on ransom payments following ransomware attacks. This new prohibition will apply to public sector...
The post UK to Ban Ransom Payments for Public Sector and Critical Infrastructure in Fight Against Cybercrime appeared first on Penetration Testing Tools.
Chenguang Gong, a 59-year-old engineer from Silicon Valley holding dual citizenship in the United States and China, has pleaded guilty to the theft of over 3,600 confidential documents containing critical military technology developments. Among the...
The post Silicon Valley Engineer Pleads Guilty to Stealing US Military Tech Secrets for China appeared first on Penetration Testing Tools.
Microsoft has released the preview cumulative update KB5062660 for Windows 11 version 24H2, introducing 29 new features and enhancements. As part of the traditional end-of-month optional update cycle, this release does not include security...
The post Windows 11 24H2 Preview Unleashes 29 New Features: Rapid Recovery, Recall in EEA, AI Assistant & More appeared first on Penetration Testing Tools.
In the latest security update for Windows Server 2019, released on July 8, a critical flaw has emerged—one that threatens the stability of entire clustered infrastructures. Patch KB5062557 disrupts the proper functioning of the...
The post Windows Server 2019 Update (KB5062557) Breaks Clusters, Causes VM Restarts & BitLocker Issues appeared first on Penetration Testing Tools.
spraycharles Low and slow password spraying tool, designed to spray on an interval over a long period of time. Includes spraying plugins for Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, and SMB. Associated blog post by @sprocket_ed covering NTLM over HTTP,...
The post spraycharles: Low and slow password spraying tool appeared first on Penetration Testing Tools.
Dell has officially confirmed a cybersecurity breach and subsequent data leak within its IT environment, while emphasizing that the compromised files hold no real value. According to the company, the leaked data primarily consists...
The post Dell Confirms Cybersecurity Breach: WorldLeaks Claims 1.3TB Data Exfil, But Dell Says “No Real Value” appeared first on Penetration Testing Tools.
