The leak of a fourth episode linked to the APT35 hacking group—also known as Charming Kitten—dramatically reshapes perceptions
The post The Accounting of Intrusion: How the “Episode 4” Leak Exposed APT35’s Bureaucratic Machine appeared first on Penetration Testing Tools.
The Tor Project has published its Form 990 tax filings and an independent audit of its financial statements
The post Onions & Audit Trails: How the Tor Project is Decoupling from Government Funding appeared first on Penetration Testing Tools.
Check Point researchers have uncovered a new campaign known as the so-called YouTube Ghost Network—a web of hijacked
The post Vectored Overloading: New “Ghost Network” Hijacks YouTube to Deploy Stealthy GachiLoader appeared first on Penetration Testing Tools.
A newly discovered vulnerability in FreeBSD components responsible for IPv6 configuration allows an attacker on the same local
The post Router Risk: New FreeBSD Flaw Exploits IPv6 to Grant Remote Code Execution appeared first on Penetration Testing Tools.
BruteForceAI is an advanced penetration testing tool that revolutionizes traditional brute-force attacks by integrating Large Language Models (LLM)
The post Brute Force Reimagined: How BruteForceAI Uses LLMs to Crack Complex Login Forms appeared first on Penetration Testing Tools.
The struggle for leadership in AI is increasingly shifting from research labs to mass-market products. Just one day
The post The Flash Flip: Google’s New Gemini 3 Flash Topples GPT-5.2 in Key AI Benchmarks appeared first on Penetration Testing Tools.
Android is expanding its pilot program to combat phone scams in which fraudsters persuade victims to enable screen
The post Breaking the Spell: Android’s New 30-Second Safety Brake Stops Screen-Sharing Scammers appeared first on Penetration Testing Tools.
Cisco has warned that threat actors are already exploiting a critical vulnerability in its widely deployed products, one
The post Unpatched & Rooted: China-Linked Hackers Exploit Cisco Zero-Day to Hijack Secure Email Gateways appeared first on Penetration Testing Tools.
Arctic Wolf reports the first confirmed intrusions into customer networks in which attackers logged into FortiGate devices via
The post The SSO Trap: How a “Default” Feature is Granting Attackers Admin Access to FortiGate Devices appeared first on Penetration Testing Tools.
French law enforcement authorities have arrested a 22-year-old man suspected of orchestrating a recent cyberattack against the country’s
The post Retaliation Strike: 22-Year-Old Arrested After BreachForums Hacks French Ministry of Interior appeared first on Penetration Testing Tools.
Researchers at iVerify have identified a new Android remote access trojan dubbed Cellik, which blends the capabilities of
The post The Play Store Predator: New Cellik Spyware Can Trojanize Any App With One Click appeared first on Penetration Testing Tools.
The Kimwolf botnet has drawn intense scrutiny after researchers at QiAnXin XLab reported that it had infected more
The post Taming the Wolf: How the 1.8 Million-Strong Kimwolf Botnet Overtook Google Traffic appeared first on Penetration Testing Tools.
Since early December 2025, SOC teams in Japan have been observing a wave of attacks exploiting React2Shell (CVE-2025-55182)—a
The post Beyond the Shell: Critical React2Shell Exploit Hits Japan to Deploy Stealthy ZnDoor RAT appeared first on Penetration Testing Tools.
GroupPolicyBackdoor is a python utility for Group Policy Objects (GPOs) manipulation and exploitation. GPO attack vectors can very often
The post GPO Stealth: Turn Active Directory Into Your C2 With the New GroupPolicyBackdoor Framework appeared first on Penetration Testing Tools.
In October 2025, experts at Kaspersky Lab uncovered a new wave of targeted attacks attributed to the ForumTroll
The post The Plagiarism Trap: How ForumTroll APT is Holding Academic Careers Hostage to Deploy Spyware appeared first on Penetration Testing Tools.
Researchers at Gen have reported a new WhatsApp account-takeover technique dubbed GhostPairing. The attack appears mundane and arouses
The post The Invisible Roommate: How the GhostPairing Scam Steals Your WhatsApp Without a Password appeared first on Penetration Testing Tools.
Researchers at Check Point Research have uncovered a large-scale espionage operation conducted by the Chinese APT group Ink
The post The Living Mesh: Ink Dragon Turns European Government Servers into a Global ShadowPad Relay Network appeared first on Penetration Testing Tools.
Cymulate Research Labs has uncovered a local privilege escalation vulnerability in Microsoft Windows Admin Center (WAC) version 2.4.2.1,
The post SYSTEM via WAC: How a Permissions Oversight in Windows Admin Center Leads to Full Host Compromise appeared first on Penetration Testing Tools.
Japanese company Internet Initiative Japan (IIJ) has reported observing a new variant of the malware known as Type
The post The Silent Listener: New DRBControl Backdoor Variant Uses Network Sniffing to Evade Detection appeared first on Penetration Testing Tools.
A security researcher has demonstrated how a “booby-trapped” e-book can turn an ordinary Kindle into a gateway to
The post The Trojan Book: How a Malicious E-book Can Hijack Your Entire Amazon Account appeared first on Penetration Testing Tools.
