DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory (File Mapping). It avoids
The post DbgNexum: Shellcode injection using the Windows Debugging API appeared first on Penetration Testing Tools.
Microsoft has definitively abandoned phone-based activation for Windows and Office. Although the company still references this method in
The post The End of Offline: Microsoft Silently Kills Phone Activation After 24 Years appeared first on Penetration Testing Tools.
The hacking group known as ShinyHunters has claimed responsibility for breaching the infrastructure of Resecurity and exfiltrating internal
The post Hack or Honeypot? ShinyHunters Claims Victory While Resecurity Claims a Masterful Trap appeared first on Penetration Testing Tools.
The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under
The post The StreamSpy Breach: Patchwork’s Stealthy New Trojan Targets Pakistan Defense appeared first on Penetration Testing Tools.
A hacking group operating under the name DarkSpectre has, for seven years, systematically infected the computers of users
The post The DarkSpectre Files: How a 7-Year Extension Campaign Hijacked 8.8 Million Browsers appeared first on Penetration Testing Tools.
The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies,
The post The Adaptive Spy: Transparent Tribe’s New RAT Outsmarts Antivirus to Target India appeared first on Penetration Testing Tools.
A large-scale supply chain compromise known as Shai-Hulud has been linked to the recent theft of approximately USD
The post The Worm in the Code: How the Shai-Hulud npm Attack Hijacked Trust Wallet appeared first on Penetration Testing Tools.
When it seems that modern browsers have exhausted their capacity to surprise, someone comes along and returns the
The post Terminal Rebellion: The brow6el Project Brings the Full Web to Your Command Line appeared first on Penetration Testing Tools.
Hong Kong banks have devised a radical way to undercut fraudsters: a portion of funds can be placed
The post The Physical Firewall: How Hong Kong’s “Money Safe” Uses Face-to-Face Checks to Kill Digital Fraud appeared first on Penetration Testing Tools.
An advertisement has surfaced on the BreachForums forum offering a large data archive for sale. According to the
The post Deep Space Leak: 200GB of ESA and Airbus Code Put Up for Sale by Hacker “888” appeared first on Penetration Testing Tools.
In the midst of the Christmas holidays, researchers at Greynoise detected a large-scale cyberattack targeting vulnerable Adobe ColdFusion
The post The Christmas Blitz: Coordinated Attack Spikes to 2.5M Requests via Adobe ColdFusion appeared first on Penetration Testing Tools.
A critical vulnerability has been discovered in XSpeeder devices that could allow unauthenticated remote execution of arbitrary code.
The post The AI-Found Zero-Day: Critical CVE-2025-54322 Leaves 70,000 XSpeeder Devices Exposed appeared first on Penetration Testing Tools.
A new wave of malicious extensions has been uncovered in the Open VSX extension marketplace, which is used
The post GlassWorm’s macOS Gambit: The Invisible Worm Draining Developer Wallets via Open VSX appeared first on Penetration Testing Tools.
Robin is an AI-powered tool for conducting dark web OSINT investigations. It leverages LLMs to refine queries, filter
The post Robin: The AI-Powered “Sidekick” for Dark Web OSINT Investigations appeared first on Penetration Testing Tools.
KittyLoader is a highly evasive loader written in C / Assembly. Features Hijacks early execution by replacing the
The post The Ghost in the Kernel: Inside KittyLoader’s Elite Anti-Analysis Arsenal appeared first on Penetration Testing Tools.
A serious incident caused by ransomware has struck Romania’s largest coal-fired power producer, Oltenia Energy Complex. The attack,
The post The Gentlemen’s Heist: Ransomware Cripples Romania’s Largest Coal Power Giant appeared first on Penetration Testing Tools.
At the recent Chaos Communication Congress in Germany, a new warning was issued about the risks associated with
The post AgentHopper Alert: How a Single Web Sentence Can Hijack Your AI Assistant appeared first on Penetration Testing Tools.
Cyber-espionage attributed to the Chinese group HoneyMyte—also known as Mustang Panda and Bronze President—has reached a new level.
The post The Kernel Ghost: Mustang Panda’s New Rootkit Blinds Antivirus to Deploy ToneShell appeared first on Penetration Testing Tools.
Coinbase has reported the first arrests in its investigation into the sale of customer data: police in Hyderabad,
The post The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal appeared first on Penetration Testing Tools.
A dangerous vulnerability has been discovered in the Trust Wallet browser extension, potentially allowing attackers to steal users’
The post How a Hidden Backdoor Drained $7M from Trust Wallet appeared first on Penetration Testing Tools.
