A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale.
The post The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers appeared first on Penetration Testing Tools.
One of the year’s most anticipated films starring Leonardo DiCaprio, Battle After Battle, has yet to reach official
The post Malware in Subtitles: Scammers Use Leonardo DiCaprio’s “One Battle After Another” to Spread Agent Tesla appeared first on Penetration Testing Tools.
Browser extensions have long been a familiar way to boost productivity and add useful features, yet another incident
The post Betrayal of Trust: “Featured” Urban VPN Extension Caught Stealing Private AI Chat Logs from 8M Users appeared first on Penetration Testing Tools.
As early as the spring of 2024, Microsoft promised a substantial performance boost for Windows Server 2025 on
The post Unlocking the Speed: Windows Server 2025 Delivers 80% IOPS Boost with New Native NVMe Stack appeared first on Penetration Testing Tools.
BugTrace-AI is a comprehensive web vulnerability analysis suite that leverages the power of Generative AI to assist developers,
The post BugTrace-AI: The Comprehensive AI-Powered Suite for SAST, DAST, and Vulnerability Research appeared first on Penetration Testing Tools.
The Unit 42 team at Palo Alto Networks has documented a prolonged and low-visibility campaign targeting government bodies
The post Ashen Lepus (WIRTE) Targets Middle East Governments with Stealthy AshTag Malware Toolkit appeared first on Penetration Testing Tools.
In the autumn of 2025, files began circulating in the public domain that are attributed to the Iranian
The post Deep Leak: APT35 Hackers’ Payroll, Kashef Surveillance System, and 2004 Nuclear Spy Document Exposed appeared first on Penetration Testing Tools.
A tool has been released into the public domain that enables covert monitoring of user activity on WhatsApp
The post Invisible Surveillance: Tool Exploits WhatsApp/Signal Network Latency to Track User Activity appeared first on Penetration Testing Tools.
Apple has released out-of-band patches addressing two zero-day vulnerabilities that were already being exploited in real-world attacks. The
The post Apple Emergency Patch: Two WebKit Zero-Days Actively Exploited in Targeted iOS Attacks appeared first on Penetration Testing Tools.
Ningbo is a major port city on China’s eastern seaboard, a key industrial hub of Zhejiang Province and
The post Geely Launches World’s Largest Safety Center in Ningbo, Targeting Zero Fatalities & Zero Data Leaks appeared first on Penetration Testing Tools.
If it already felt as though smartphone security advice had devolved into an endless catalogue of prohibitions, here
The post New Security Default: CERT-FR Urges Users to Fully Disable Wi-Fi When Not Active appeared first on Penetration Testing Tools.
MangaGamer has issued a warning about a potential supply-chain attack: in the latest print run of the physical
The post Supply Chain Alert: MangaGamer Higurashi USB Installers Compromised with Possible Floxif Malware appeared first on Penetration Testing Tools.
The GNOME Shell Extensions team has decided to tighten moderation rules in the EGO catalog in response to
The post Quality Control: GNOME Extensions Catalog Rejects Submissions with Unvetted AI-Generated Code appeared first on Penetration Testing Tools.
The 0patch team has reported that while analyzing CVE-2025-59230 in the Windows Remote Access Connection Manager (RasMan)—a flaw
The post Unpatched RasMan Zero-Day Allows Local System Takeover via DoS Crash and RPC Spoofing appeared first on Penetration Testing Tools.
The administration of U.S. President Donald Trump is preparing to enlist private companies in the conduct of offensive
The post US Draft Cyber Strategy Plans to Enlist Private Firms for Offensive Cyber Operations appeared first on Penetration Testing Tools.
A project called stillepost demonstrates an unusual technique that turns an ordinary Chromium-based browser into an application-layer proxy
The post Covert Channels: Stillepost Turns Chromium Browser into Stealth Application-Layer Proxy appeared first on Penetration Testing Tools.
Ghidra, the free reverse-engineering framework developed by the U.S. National Security Agency’s research arm, has reached version 12.0,
The post Ghidra 12.0 Released: Adds Concolic Execution and File System Mirroring for Reverse Engineering appeared first on Penetration Testing Tools.
Blocking EDRs traffic Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender
The post Blocking EDRs traffic: C-Based Tools That Block EDR Network Traffic via Windows Firewall and WFP appeared first on Penetration Testing Tools.
A scheme is gaining momentum worldwide in which doxers impersonate police officers and use so-called “emergency requests” to
The post Emergency Doxing: Scammers Impersonate Police to Steal Data from Apple, Charter, and Amazon appeared first on Penetration Testing Tools.
Kali Linux 2025.4 has been released—the final update of the year for the distribution relied upon by cybersecurity
The post Kali Linux 2025.4 Final Release: GNOME is Now Wayland Exclusive, New Pentesting Tools Added appeared first on Penetration Testing Tools.
