Penetration Testing

APRIL 8, 2024

Damn Vulnerable RESTaurant An intentionally vulnerable API service designed for learning and training purposes dedicated to developers, ethical hackers, and security engineers.

Penetration Testing 145

Penetration Testing Engineering 145

Mitnick Security

JANUARY 12, 2023

Incorporating cybersecurity services as part of your organization’s security plan can help stop threat actors in their tracks. From cyber security awareness training to Red Team engagements , Mitnick Security offers a wide range of services designed to strengthen the security posture of businesses of all sizes.

Penetration Testing 59

Penetration Testing Security Awareness Cybersecurity 59

Penetration Testing

MAY 1, 2024

Recently, HPE Aruba Networking announced a comprehensive update to its ArubaOS software, targeting multiple critical vulnerabilities that could potentially allow attackers to execute arbitrary code remotely and cause denial-of-service conditions.

Mobile 109

Mobile Penetration Testing Software 109

Penetration Testing

APRIL 15, 2024

A newly discovered vulnerability in Libreswan, a widely used open-source VPN (Virtual Private Network) software, could leave systems open to crashes and potential denial of service attacks, say researchers.

VPN 117

VPN Software Penetration Testing Risk 117

Penetration Testing

MAY 1, 2024

Dropbox confirmed a security breach on April 24th within its Dropbox Sign (formerly HelloSign) service, exposing customer data including email addresses, usernames, phone numbers, and hashed passwords.

Data breaches 103

Data breaches Penetration Testing Authentication Passwords 103

Penetration Testing

APRIL 18, 2024

This notorious Ransomware-as-a-Service (RaaS) framework, operated by the hacktivist group GhostSec, has undergone a significant evolution. Unveiled: Evolving Ransomware-as-a-Service Poses Growing Threat appeared first on Penetration Testing. Its new... The post GhostLocker 2.0

Penetration Testing 111

Penetration Testing Ransomware Cybersecurity Malware 111

Penetration Testing

APRIL 29, 2024

A disturbing new report by Akamai security researchers highlights the shocking scale of phishing scams impersonating the United States Postal Service (USPS).

Scams 107

Scams Penetration Testing Phishing Malware 107

eSecurity Planet

OCTOBER 13, 2023

Penetration testing is a critically important cybersecurity practice, but one that many organizations lack the on-staff skills to do themselves. Fortunately, there are many pentesting services out there that can do the job for them across a range of budgets and needs.

Penetration Testing 119

Penetration Testing Social Engineering Software Cyber Attacks 119

Penetration Testing

MARCH 13, 2024

Organizations relying on Tomcat must prioritize updates to mitigate denial of service (DoS) attacks exploiting these flaws. What’s... The post Apache Tomcat Vulnerabilities Exposed, Prompt Updates Required appeared first on Penetration Testing.

Penetration Testing 144

Penetration Testing Software 144

Penetration Testing

MARCH 2, 2024

SharpADWS SharpADWS is an Active Directory reconnaissance and exploitation tool for Red Teams that collects and modifies Active Directory data via the Active Directory Web Services (ADWS) protocol.

Penetration Testing 145

Penetration Testing 145

Penetration Testing

APRIL 24, 2024

A series of serious vulnerabilities in Judge0, a widely-used online code execution system, could have devastating consequences for competitive programming sites, e-learning platforms, and any service that relies on secure code evaluation.

Penetration Testing 106

Penetration Testing 106

Penetration Testing

MAY 2, 2024

Cisco has issued a security advisory highlighting multiple vulnerabilities in the firmware of several IP Phone models that could allow unauthenticated, remote attackers to engage in detrimental activities ranging from denial of service (DoS)... The post Cisco IP Phones Exposed: Vulnerabilities Allow Hackers to Disrupt, Spy, and Even Make (..)

Penetration Testing 92

Penetration Testing Firmware 92

Bleeping Computer

MARCH 13, 2024

Organizations commonly change their pen test providers annually. Learn more from Outpost24 about the drawbacks of rotating pentest providers and the benefits of the Penetration Testing as a Service (PTaaS) model. [.]

Penetration Testing 91

Penetration Testing 91

Penetration Testing

APRIL 18, 2024

These flaws, which could open the door for denial of service attacks or expose sensitive data,... The post Keycloak Patches Vulnerabilities, Mitigates DDoS and Data Theft Risks appeared first on Penetration Testing.

DDOS 109

DDOS Penetration Testing Risk Authentication 109

Penetration Testing

APRIL 20, 2024

A new campaign orchestrated by the notorious APT29 hacking group – widely associated with Russia’s Foreign Intelligence Service (SVR) – exposes a dangerous shift in tactics for this sophisticated threat actor. The group has... The post WINELOADER: A Tool for Espionage and Disruption appeared first on Penetration Testing.

Penetration Testing 94

Penetration Testing Hacking Malware 94

Penetration Testing

MARCH 24, 2024

Attackers can exploit this flaw to launch denial-of-service (DoS) attacks, potentially taking down... The post CVE-2024-30156 Flaw in Popular Varnish Cache Software Could Cripple Websites appeared first on Penetration Testing.

Penetration Testing 122

Penetration Testing Software 122

Dark Reading

NOVEMBER 15, 2023

With a two-pronged approach, the group trains its hackers in penetration testing, only to set them free to build a marketplace for pen-testing services.

Penetration Testing 121

Penetration Testing 121

Penetration Testing

MARCH 21, 2024

Long known as a cryptor-as-a-service (CaaS), enabling criminals to disguise their malware, AceCryptor has recently... The post AceCryptor Exploited in Multi-Country Attacks, European Businesses Targeted appeared first on Penetration Testing.

Penetration Testing 118

Penetration Testing Malware Cybersecurity 118

Penetration Testing

JANUARY 29, 2024

Discovered through Google’s OSS-Fuzz service, three security vulnerabilities have been identified in its systems, two of which... The post CVE-2024-22860 & CVE-2024-22862: Critical FFmpeg Remote Code Execution Flaws appeared first on Penetration Testing.

Penetration Testing 143

Penetration Testing 143

Penetration Testing

MAY 2, 2024

The vulnerability, tracked as CVE-2024-30251, is a denial of service (DoS)... The post CVE-2024-30251: Denial of Service Vulnerability in aiohttp Threatens Web Services appeared first on Penetration Testing.

Penetration Testing 65

Penetration Testing 65

Penetration Testing

APRIL 9, 2024

In a chilling development that highlights the ever-evolving nature of cyber threats, the infamous “Muddled Libra” hacking group is setting its sights on a new frontier: the cloud and Software-as-a-Service (SaaS).

Penetration Testing 104

Penetration Testing Cyber threats Software Hacking 104

Penetration Testing

MAY 1, 2024

Dubbed “Goldoon,” this botnet is ruthlessly exploiting a nearly decade-old vulnerability in D-Link devices to commandeer them for malicious activities, primarily Distributed Denial-of-Service... The post “Goldoon” Botnet Exploits Unpatched D-Link Devices appeared first on Penetration Testing.

Penetration Testing 81

Penetration Testing DDOS Malware 81

Security Boulevard

APRIL 11, 2024

APIs (Application Programming Interfaces) have become the backbone of many modern applications, and indeed the foundation of some businesses services. APIs enable seamless communication between applications, services and systems, allowing. The post Securing APIs through penetration testing appeared first on Sentrium Security.

Penetration Testing 59

Penetration Testing Business Services 59

Penetration Testing

FEBRUARY 19, 2024

A proof-of-concept (PoC) was disclosed for a severe design flaw (CVE-2023-50387) in Domain Name System Security Extensions (DNSSEC), leaving DNS infrastructures vulnerable to widespread denial-of-service (DoS) attacks.

DNS 131

DNS Penetration Testing 131

Penetration Testing

MARCH 6, 2024

Cado Security Labs’ recent discovery exposed a complex malware campaign zeroing in on Linux servers misconfigured with popular cloud services.

Penetration Testing 112

Penetration Testing Malware 112

eSecurity Planet

JUNE 28, 2023

Penetration tests are vital components of vulnerability management programs. In these tests, white hat hackers try to find and exploit vulnerabilities in your systems to help you stay one step ahead of cyberattackers. Here we’ll discuss penetration testing types, methods, and determining which tests to run.

Penetration Testing 125

Penetration Testing Social Engineering Wireless Engineering 125

Penetration Testing

MARCH 14, 2024

Apache CXF, a popular open-source web services framework, is urging users to update immediately. CVE-2024-28752 – SSRF Vulnerability Impacts Apache CXF Users appeared first on Penetration Testing. A Server-Side Request Forgery (SSRF) vulnerability, tracked as CVE-2024-28752, has been discovered in versions before 4.0.4,

Penetration Testing 111

Penetration Testing 111

Penetration Testing

FEBRUARY 18, 2024

They range from sensitive data exposure, and service disruption, all... The post CVE-2023-32462 (CVSS 9.8): Patch Dell Switches to Block Takeover appeared first on Penetration Testing. Recently disclosed vulnerabilities (CVE-2023-28078 and CVE-2023-32462) pose a severe threat.

Penetration Testing 122

Penetration Testing 122

Penetration Testing

FEBRUARY 23, 2024

Without needing to rely on other tools this version will be extensible to bruteforce many different services and is way faster than its Python counterpart. Currently, Brutespray... The post brutespray: Automatically attempts default creds on found services appeared first on Penetration Testing.

Penetration Testing 109

Penetration Testing Passwords 109

Security Boulevard

JULY 14, 2023

Conducting regular penetration tests (pentests) is a proactive option that identifies, evaluates and mitigates risks. The post Why Pentesting-as-a-Service is Vital for Business Security appeared first on Security Boulevard.

Penetration Testing 97

Penetration Testing Risk Cybersecurity Network Security 97

NetSpi Executives

NOVEMBER 14, 2023

Not all penetration testing reports are created equal, so we summarized key sections to look for that build up to a comprehensive and actionable report. Use this article and the penetration testing report examples below to make sure reports you receive speak to prioritized findings backed up with sound methodology.

Penetration Testing 102

Penetration Testing Architecture Security Performance Risk 102

Penetration Testing

MARCH 14, 2024

In a newly released Threat Analysis report, Cybereason Security Services has sounded the alarm about a dangerous wave of attacks targeting a critical vulnerability (CVE-2023-46604) in the Apache ActiveMQ messaging service.

Penetration Testing 97

Penetration Testing Ransomware Malware 97

Penetration Testing

JANUARY 31, 2024

ADOKit Azure DevOps Services Attack Toolkit – ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to... The post ADOKit: Azure DevOps Services Attack Toolkit appeared first on Penetration Testing.

Penetration Testing 100

Penetration Testing 100

Penetration Testing

MARCH 14, 2024

Apache ZooKeeper, a widely used coordination service for distributed applications, has a critical security vulnerability, tracked as CVE-2024-23944.

Penetration Testing 109

Penetration Testing 109

Penetration Testing

FEBRUARY 20, 2024

Vulnerability Breakdown CVE-2023-6397 (Firewalls): Potential denial-of-service... The post Zyxel Security Vulnerabilities: DoS, Command Injection & More appeared first on Penetration Testing. Failure to take immediate action could leave these devices open to severe security risks.

Penetration Testing 105

Penetration Testing Firewall Risk 105

Penetration Testing

FEBRUARY 29, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added a recently patched security flaw (CVE-2023-29360) in Microsoft Streaming Service to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.... PoC Published appeared first on Penetration Testing.

Penetration Testing 96

Penetration Testing Cybersecurity 96

Penetration Testing

JANUARY 31, 2024

In December 2023, Elastic Security Labs uncovered a sophisticated cyber intrusion, dubbed REF0657, targeting a financial services organization in South Asia.

Cyber Attacks 108

Cyber Attacks Penetration Testing Financial Services 108