Open-source software forms the bedrock of today’s digital infrastructure, powering 77% of all applications and valued at over $12 trillion. Yet its widespread adoption renders it an increasingly attractive target for supply chain attacks,...
The post Google Launches OSS Rebuild: A New Weapon Against Open-Source Supply Chain Attacks appeared first on Penetration Testing Tools.
Microsoft has confirmed that three China-linked threat groups were behind the recent wave of attacks targeting on-premises SharePoint Server installations. According to the company’s report, since early July, the vulnerabilities identified as CVE-2025-53770 and...
The post Microsoft Confirms China-Backed APTs Actively Exploiting SharePoint Zero-Days (CVE-2025-53770, -53771) appeared first on Penetration Testing Tools.
A newly uncovered malicious campaign involving the infostealer DeerStealer has been identified by researchers at ANY.RUN. Threat actors are employing a sophisticated tactic—combining Windows shortcut files (LNK) with trusted system utilities known as Living-off-the-Land...
The post DeerStealer: New Malware Uses Stealthy LNK & LOLBins for Undetectable Data Theft appeared first on Penetration Testing Tools.
In 2023, one of the United Kingdom’s oldest transport companies—established 158 years ago—declared bankruptcy following a devastating ransomware attack. The cyber assault brought the operations of Knights of Old (also known as KNP) to...
The post Weak Password Destroys 158-Year-Old UK Transport Company: Akira Ransomware Claims 700 Jobs appeared first on Penetration Testing Tools.
Recently uncovered critical vulnerabilities in Cisco’s infrastructure are already being actively exploited by malicious actors to compromise corporate networks. The company has officially confirmed that its Product Security Incident Response Team (PSIRT) has observed...
The post Cisco ISE Critical RCE Zero-Days (CVSS 10.0) Actively Exploited In The Wild – Patch Immediately! appeared first on Penetration Testing Tools.
The British government has announced its preparation for a bold and decisive move in the fight against cybercrime—a sweeping ban on ransom payments following ransomware attacks. This new prohibition will apply to public sector...
The post UK to Ban Ransom Payments for Public Sector and Critical Infrastructure in Fight Against Cybercrime appeared first on Penetration Testing Tools.
Chenguang Gong, a 59-year-old engineer from Silicon Valley holding dual citizenship in the United States and China, has pleaded guilty to the theft of over 3,600 confidential documents containing critical military technology developments. Among the...
The post Silicon Valley Engineer Pleads Guilty to Stealing US Military Tech Secrets for China appeared first on Penetration Testing Tools.
Microsoft has released the preview cumulative update KB5062660 for Windows 11 version 24H2, introducing 29 new features and enhancements. As part of the traditional end-of-month optional update cycle, this release does not include security...
The post Windows 11 24H2 Preview Unleashes 29 New Features: Rapid Recovery, Recall in EEA, AI Assistant & More appeared first on Penetration Testing Tools.
In the latest security update for Windows Server 2019, released on July 8, a critical flaw has emerged—one that threatens the stability of entire clustered infrastructures. Patch KB5062557 disrupts the proper functioning of the...
The post Windows Server 2019 Update (KB5062557) Breaks Clusters, Causes VM Restarts & BitLocker Issues appeared first on Penetration Testing Tools.
spraycharles Low and slow password spraying tool, designed to spray on an interval over a long period of time. Includes spraying plugins for Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, and SMB. Associated blog post by @sprocket_ed covering NTLM over HTTP,...
The post spraycharles: Low and slow password spraying tool appeared first on Penetration Testing Tools.
Dell has officially confirmed a cybersecurity breach and subsequent data leak within its IT environment, while emphasizing that the compromised files hold no real value. According to the company, the leaked data primarily consists...
The post Dell Confirms Cybersecurity Breach: WorldLeaks Claims 1.3TB Data Exfil, But Dell Says “No Real Value” appeared first on Penetration Testing Tools.
Google has released the findings of its investigations into coordinated influence operations conducted across its platforms during the second quarter of 2025. In total, more than 11,000 accounts and assets were removed, including 10,910...
The post Google Removes 11,000+ Accounts in Q2 2025 Crackdown on Coordinated Influence Operations appeared first on Penetration Testing Tools.
PyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C#. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It’s...
The post pywhisker: Python tool for Shadow Credentials attacks appeared first on Penetration Testing Tools.
Microsoft has unveiled an enhanced data migration feature designed to ease the transition for users moving from Windows 10, whose official support will end in less than three months. This new tool enables the...
The post Windows 11 Introduces New PC-to-PC Migration Tool for Easier Upgrades appeared first on Penetration Testing Tools.
Amid the relentless surge of digital threats, companies across the globe find themselves under a barrage of cyberattacks. According to the latest data from Check Point Research, each organization now endures an average of...
The post Global Cyberattacks Surge 143% in Four Years: Check Point Reveals Escalating Threat Landscape appeared first on Penetration Testing Tools.
Cybercriminals are mastering increasingly sophisticated methods of delivering malicious code, leveraging unconventional file formats to evade security defenses. A recent case documented by researchers illustrates how a seemingly innocuous audio message in WAV format...
The post Warning: Stealthy WAV Malware Disguised as Voicemail Targets Users, Bypassing Email Filters appeared first on Penetration Testing Tools.
ExpressVPN has resolved a vulnerability in its Windows client that allowed Remote Desktop Protocol (RDP) connections to bypass the VPN tunnel, thereby exposing users’ real IP addresses. The issue affected versions 12.97 through 12.101.0.2-beta...
The post ExpressVPN Fixes RDP Leak: Real IP Addresses Exposed Due to Debugging Code Oversight appeared first on Penetration Testing Tools.
This past weekend, Indian cryptocurrency platform CoinDCX suffered a large-scale cyberattack, resulting in the theft of over $44 million in digital assets. The breach affected only the company’s internal operational account, with user funds...
The post CoinDCX Hacked for $44 Million in Crypto: Internal Account Breached, User Funds Safe appeared first on Penetration Testing Tools.
The Chinese cyber group known as SilverFox, active since June 2023, has launched one of the most expansive malware distribution campaigns targeting Windows to date. Focusing on Chinese-speaking users worldwide—including business professionals operating outside...
The post SilverFox Unleashes Massive Malware Campaign: 2,800+ Domains Target Chinese-Speaking Users Worldwide appeared first on Penetration Testing Tools.
An eBPF agent that captures traffic flowing through the Linux kernel. By attaching to TLS/SSL functions, data is intercepted before and after encryption and then passed to flexible plugins with full visibility along with...
The post Qtap: See Through Encrypted Linux Traffic with eBPF for Unparalleled Observability and Security Auditing appeared first on Penetration Testing Tools.
