Hacker groups have exploited a security gap in Array AG Series corporate gateways, implanting covert management micro-programs and
The post Covert Backdoor: Array AG Gateway Exploit Allows Command Execution appeared first on Penetration Testing Tools.
On 4 December 2025, the Apache Software Foundation disclosed a critical vulnerability — CVE-2025-66516, rated the maximum CVSS
The post CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files appeared first on Penetration Testing Tools.
Google has unveiled Gemini 3 Pro — a new generation of multimodal models that not only see images
The post Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code appeared first on Penetration Testing Tools.
Over the weekend, one of the most compelling updates in recent months landed in the Linux 6.19 branch:
The post Linux 6.19: Kernel Gains Foundational PCIe Link Encryption for AMD SEV-TIO appeared first on Penetration Testing Tools.
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers —
The post IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft appeared first on Penetration Testing Tools.
Singularity is a powerful Linux Kernel Module (LKM) rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities
The post Singularity: Advanced Linux Kernel Rootkit Uses ftrace to Bypass EDR and eBPF appeared first on Penetration Testing Tools.
NVIDIA has announced the most significant update to the CUDA platform since its inception in 2006. With CUDA
The post NVIDIA CUDA 13.1: ‘CUDA Tile’ Abstraction Simplifies High-Level GPU Programming appeared first on Penetration Testing Tools.
The latest cycle of updates within the Linux distribution ecosystem closes the year with a notable milestone: Alpine
The post Alpine Linux 3.23 Released: Adopts 6.18 LTS Kernel & Unveils APK 3.0 Package Manager appeared first on Penetration Testing Tools.
Researchers at Striker STAR Labs have detailed a new attack against agent-based browsers that can turn an ordinary
The post Zero-Click Threat: New Attacks Turn AI Browsers into Google Drive Wipers appeared first on Penetration Testing Tools.
Chinese phishing groups that inundate users with endless SMS alerts about a “delivery problem” or an “unpaid fine”
The post Phishing Kits Steal Cards, Bind to Apple Pay/Google Wallet via Fake Stores appeared first on Penetration Testing Tools.
The new malicious distribution tool GhostFrame has spread with remarkable speed throughout the cybercriminal ecosystem, becoming the source
The post GhostFrame: Stealthy Iframe Phishing Toolkit Fuels 1 Million+ Covert Attacks appeared first on Penetration Testing Tools.
Two China-linked hacking groups began exploiting a critical vulnerability in React Server Components just hours after it became
The post China APTs Exploiting React Server RCE (CVE-2025-55182) Hours After Disclosure appeared first on Penetration Testing Tools.
Cloudflare’s services suffered yet another disruption on Friday morning, rendering LinkedIn, Zoom, Downdetector, and a number of other
The post Cloudflare Outage 2.0: Faulty React Patch Configuration Disrupts Major Websites appeared first on Penetration Testing Tools.
At the end of November, a team of bug hunters uncovered an infection chain that began with a
The post Developer Alert: Fake VS Code Extension Deploys OctoRAT via Multi-Stage Anivia Loader appeared first on Penetration Testing Tools.
Nearly two years after the debut of the 14.0 branch, the FreeBSD project has unveiled a major new
The post FreeBSD 15.0 Arrives: New 4-Year Lifecycle, pkgbase Updates, and Massive ZFS/Jail Upgrades appeared first on Penetration Testing Tools.
An international fraud operation has culminated in a sweeping blow against a vast crypto-scam network that laundered more
The post Global Crackdown Dismantles Crypto-Scam Network, Laundering Over €700 Million appeared first on Penetration Testing Tools.
Google has released the Android 16 QPR2 update, introducing substantial refinements across the interface, developer tooling, and system
The post Android 16 QPR2: New Minor SDK Brings 3-Hour OTP SMS Delay & Icon Customization appeared first on Penetration Testing Tools.
Chinese cyber-espionage actors have spent years burrowed, undetected, within the networks of critical organizations, infiltrating infrastructure with sophisticated
The post Chinese APT Deploys Cross-Platform ‘Brickstorm’ Backdoor, Burrows for Years in Critical Networks appeared first on Penetration Testing Tools.
ChromeAlone is a browser implant that can be used in place of conventional implants like Cobalt Strike or
The post ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys appeared first on Penetration Testing Tools.
The GoldFactory group has launched a new wave of attacks targeting mobile-banking users across Southeast Asia. Disguising themselves
The post GoldFactory Malware Injects FriHook/SkyHook into Banking Apps to Exploit 11K SE Asia Users appeared first on Penetration Testing Tools.
