Government-backed hackers infiltrated a U.S. nuclear weapons component manufacturer by exploiting vulnerabilities in Microsoft SharePoint. The incident affected
The post Nuclear Threat: Hackers Breach US Weapons Component Maker via SharePoint Zero-Days appeared first on Penetration Testing Tools.
Pentest Copilot is an open-source tool built to assist ethical hackers and penetration testers. By integrating LLMs, it
The post Pentest Copilot: The New Open-Source AI Tool for Ethical Hacking appeared first on Penetration Testing Tools.
GhostBeacon mainly consists of two primary modules: the Rogue (Fake) Access Point Spotter, which analyses Beacon Frames using
The post GhostBeacon: The Tool That Detects Rogue and Hidden Wi-Fi with 99% Accuracy appeared first on Penetration Testing Tools.
After a brief period of dormancy, the operator of the LockBit ransomware has returned to full-scale activity, unveiling
The post LockBit Rises: New Cross-Platform 5.0 Ransomware Eclipses Former Self appeared first on Penetration Testing Tools.
In mid-summer 2025, the ToolShell vulnerability (CVE-2025-53770) became the catalyst for a major wave of compromises. Attackers exploited
The post ToolShell Exploit: China-Linked Hackers Target Global Critical Infrastructure appeared first on Penetration Testing Tools.
North Korea has intensified its reliance on cybercrime and the overseas remote employment of its citizens to circumvent
The post North Korea Stole $2.8 Billion in Crypto to Fund Weapons Programs, Report Says appeared first on Penetration Testing Tools.
The Lazarus hacking group has resurfaced—this time targeting European defence firms engaged in unmanned aerial systems development. ESET
The post Operation DreamJob: Lazarus Targets European Drone Makers with Malware Lures appeared first on Penetration Testing Tools.
The PhantomCaptcha operation proved to be one of the most sophisticated phishing campaigns of recent months, directed at
The post PhantomCaptcha: Sophisticated Phishing Used to Hijack Aid Groups appeared first on Penetration Testing Tools.
A widespread exploitation campaign has descended upon WordPress sites: attackers are targeting installations that use the GutenKit and
The post Mass Attack: Hackers Hit WordPress Plugins With 8.7M Exploits in 48 Hours appeared first on Penetration Testing Tools.
Researchers at SquareX have published a comprehensive report on a newly discovered vulnerability known as AI Sidebar Spoofing—a
The post AI Sidebar Spoofing: New Attack Hides Phishing in Fake Browser Extensions appeared first on Penetration Testing Tools.
The malicious modification of Telegram X, discovered by specialists at Doctor Web, turned out to be far more
The post Baohuo Backdoor Hijacks 58,000 Telegram X Accounts for Covert Takeover appeared first on Penetration Testing Tools.
Trend Research has detailed a new wave of attacks carried out by the Agenda ransomware group, which has
The post Agenda Ransomware Deploys Linux Variant on Windows for Stealth Attack appeared first on Penetration Testing Tools.
Amid the declining effectiveness of traditional malware delivery channels, cybercriminals are increasingly turning to platforms never intended for
The post YouTube Ghost Network: 3,000 Fake Videos Used to Spread Malware appeared first on Penetration Testing Tools.
The South Korean government has announced a sweeping inspection of 1,600 IT systems across the sectors of public
The post South Korea Orders Massive Security Audit of 1,600 Critical IT Systems appeared first on Penetration Testing Tools.
The U.S. Department of Justice has charged 31 individuals, including alleged members of organized crime and former NBA
The post NBA Players Linked to $7M Poker Scam Exploiting Hacked Card Shufflers appeared first on Penetration Testing Tools.
Hackers have begun actively exploiting a newly disclosed vulnerability in the Windows Server Update Services (WSUS) component. The
The post Windows Server WSUS Flaw Under Active Attack (CVE-2025-59287, CVSS 9.8) with Public PoC appeared first on Penetration Testing Tools.
The Unit 42 team at Palo Alto Networks has released an in-depth investigation into a new international cybercrime
The post Jingle Thief: Cloud-Native Fraud Ring Steals Millions via Microsoft 365 Gift Cards appeared first on Penetration Testing Tools.
Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to
The post High-Value Targets: MuddyWater APT Used Compromised VPN Mailbox in Stealth Campaign appeared first on Penetration Testing Tools.
Beginning November 3, 2025, all developers submitting new Firefox extensions will be required to specify in their manifest.json
The post Mozilla Demands New Firefox Extensions Disclose Data Collection Practices appeared first on Penetration Testing Tools.
Beginning with the October 2025 Windows security updates, File Explorer now automatically blocks the preview of files downloaded
The post Windows Blocks File Previews to Stop NTLM Credential Leaks appeared first on Penetration Testing Tools.
