Two malware campaigns weaponize open-source software to target executives and cloud systems, combining social engineering ...

AutoPentestX is an open-source Linux penetration testing toolkit that automates scanning, CVE mapping, and reporting without ...

AI-powered penetration testing is an advanced approach to security testing that uses artificial intelligence, machine learning, and autonomous agents to simulate real-world cyberattacks, identify ...

Hackers are exploiting intentionally vulnerable penetration testing and security training apps that have been mistakenly exposed to the public internet, giving them access to cloud environments ...

Here's what to look out for ...

A phishing campaign targeting carefully selected “high-value” corporate employees has been using LinkedIn direct messages to deliver weaponized downloads, highlighting how criminals are shifting away ...

Researchers studying cybersecurity have discovered a new and sophisticated phishing effort that spreads dangerous payloads ...

Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...

A deeply practical ethical hacking bundle teaches real cybersecurity, pentesting, and bug-bounty skills for just $35.99, ...

The best cybersecurity students in the world came to Rochester Institute of Technology to battle in the Collegiate Penetration Testing Competition (CPTC) global finals Jan. 9-11. The event wrapped up ...

Agentic AI systems take penetration testing to a level far beyond traditional methods. In the words of a former Synack Red Team member and security engineer, Max Moroz, “Traditional pentesting is like ...

Designed by Cirket open-source hardware in China, the ESP32-DIV V1 is a handheld wireless pentesting and experimentation tool with Wi-Fi, BLE, generic 2.4 GHz (NRF24), and Sub-GHz RF (CC1101) ...