The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.
The post Beyond Macros: Paper Werewolf’s “EchoGather” Backdoor Exploits Excel XLLs appeared first on Penetration Testing Tools.
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out
The post Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed appeared first on Penetration Testing Tools.
By 2026, government agencies are finding it increasingly difficult to describe cyber risk with a single word or
The post The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense appeared first on Penetration Testing Tools.
The LastPass breach that occurred back in 2022 continues to generate illicit profits years later. A recent on-chain
The post The Breach That Won’t Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later appeared first on Penetration Testing Tools.
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer,
The post The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy “Google Drive” Infostealer appeared first on Penetration Testing Tools.
Docker has announced that its Docker Hardened Images (DHI) are now free and fully open: they can be
The post The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog appeared first on Penetration Testing Tools.
Blockchain investigator ZachXBT reported on December 25 that, over the preceding hours, numerous Trust Wallet users had experienced
The post The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M appeared first on Penetration Testing Tools.
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in
The post How a Capital Letter Bypasses Fortinet 2FA appeared first on Penetration Testing Tools.
The former head of Georgia’s State Security Service has become the central figure in a major corruption scandal
The post The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal appeared first on Penetration Testing Tools.
IronJump is a hardened SSH bastion and endpoint management framework written in Bash. It enables security professionals and
The post IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control appeared first on Penetration Testing Tools.
Orsted C2 is a command an control framework. It consists of many orsted-beacons that communicates with each other
The post The Ghost in the Machine: Master Stealth with the Orsted C2 Framework appeared first on Penetration Testing Tools.
Recently, a notable disruption struck the Steam platform: a segment of users was unable to access the store,
The post Christmas Eve Crash: Massive Steam Outage Derails Holiday Gaming and Sales appeared first on Penetration Testing Tools.
Ruby has almost settled into a festive tradition of its own: each Christmas, the developers unveil a new
The post Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box appeared first on Penetration Testing Tools.
A new commodity has surfaced on underground forums for those seeking to operate more quietly—and for longer. An
The post The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root appeared first on Penetration Testing Tools.
The analytical firm QKS Group has published its Exposure Management market study for the fourth quarter of 2025.
The post Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management appeared first on Penetration Testing Tools.
Security researchers uncovered several vulnerabilities in Eurostar’s public chatbot, demonstrating that a “modern” LLM interface can fail for
The post Off the Rails: How Researchers Hijacked the Eurostar AI Chatbot appeared first on Penetration Testing Tools.
The new release of elementary OS 8.1 arrives a year after its predecessor, bringing notable advances in security,
The post Design Meets Security: elementary OS 8.1 Unleashes Wayland and ARM64 Power appeared first on Penetration Testing Tools.
The latest iteration of the macOS stealer known as MacSync has learned to infiltrate victims’ machines almost “like
The post The Trusted Thief: New Signed MacSync Malware Bypasses Apple’s Gatekeeper appeared first on Penetration Testing Tools.
DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering.
The post The Patch Hunter: Automating 1-Day Exploits with DiffRays and IDA Pro appeared first on Penetration Testing Tools.
Microsoft has introduced a new hardware-accelerated version of its built-in BitLocker encryption in Windows 11. The feature is
The post Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS appeared first on Penetration Testing Tools.
