Penetration Testing Tools •

Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan supply chain attack simulation

Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan

ddos May 5, 2026

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software...

Beyond Static Analysis: Hunt, Filter, and Confirm Hijacks with DLLHijackHunter DLLHijackHunter tool

Beyond Static Analysis: Hunt, Filter, and Confirm Hijacks with DLLHijackHunter

ddos May 4, 2026

DLLHijackHunter is an automated Windows DLL hijacking detection tool that goes beyond static analysis. It discovers, validates, and...

Trellix Investigates Unauthorized Breach of Internal Source Code Repository Trellix source code breach Salesforce Gainsight Breach Logitech Data Exfiltration Avnet data breach Chess.com third-party breach Data leak, PayPal AI Security Supply Chain Security xAI Security Qantas Data Breach Android Spyware

Trellix source code breach Salesforce Gainsight Breach Logitech Data Exfiltration Avnet data breach Chess.com third-party breach Data leak, PayPal AI Security Supply Chain Security xAI Security Qantas Data Breach Android Spyware

Trellix Investigates Unauthorized Breach of Internal Source Code Repository

ddos May 4, 2026

Trellix, a preeminent titan in the cybersecurity industry, has disclosed a breach of its internal source code...

Sovereignty Over Silence: Why German Legislators are Abandoning Signal for the “Wire Bund” Fortress Most Basic Penetration Testing Lab

Sovereignty Over Silence: Why German Legislators are Abandoning Signal for the “Wire Bund” Fortress

ddos May 4, 2026

German legislators are being urged to migrate to a nascent messaging platform, a transition precipitated by a...

Binary to Behavior: Decode Threats with the Unified “Malware-Check” Analysis Engine malware-check security scanner

Binary to Behavior: Decode Threats with the Unified “Malware-Check” Analysis Engine

ddos May 1, 2026

malware-check Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source...

Earning Their Keep: Audit Your Microsoft Sentinel Log Value with “Log Horizon” Log Horizon Sentinel tool

Earning Their Keep: Audit Your Microsoft Sentinel Log Value with “Log Horizon”

ddos April 30, 2026

Log Horizon connects to your Microsoft Sentinel workspace (and optionally Defender XDR), goes through every log table you’re...

Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot Trellix source code breach Salesforce Gainsight Breach Logitech Data Exfiltration Avnet data breach Chess.com third-party breach Data leak, PayPal AI Security Supply Chain Security xAI Security Qantas Data Breach Android Spyware

Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot

ddos April 30, 2026

The video hosting vanguard Vimeo has disclosed a security transgression impacting its user repository, precipitated by a...

Peering into the Cloud: Decode Windows Defender’s MAPS Protocol with the MAPS Cloud Scanner

ddos April 29, 2026

MAPS Cloud Scanner A research tool for interacting with Windows Defender’s MAPS (Microsoft Active Protection Service) cloud-based file reputation...

Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach SitusAMC Mortgage Breach LG Energy Solution Ransomware Somalia Visa Breach Knownsec Leak Scattered LAPSUS$ Hunters Shadow AI Leakage Data Broker Document leak

SitusAMC Mortgage Breach LG Energy Solution Ransomware Somalia Visa Breach Knownsec Leak Scattered LAPSUS$ Hunters Shadow AI Leakage Data Broker Document leak

Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach

ddos April 29, 2026

Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a...

The “Snow” Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses A scripted distraction sequence used to mask the background exfiltration of stolen data

A scripted distraction sequence used to mask the background exfiltration of stolen data

The “Snow” Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses

ddos April 29, 2026

Corporate correspondence has once again emerged as a convenient portal for adversaries. In this nascent campaign, the...

The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools Stalkerware Detection Android Zero-Click, RCE Vulnerability Zero-click RCE RatOn Hook malware Russian cyber-espionage

Stalkerware Detection Android Zero-Click, RCE Vulnerability Zero-click RCE RatOn Hook malware Russian cyber-espionage

The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools

ddos April 29, 2026

A clandestine Android dropper, masquerading as a mundane PDF reader, has once again infiltrated the Google Play...

The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security APT42 SpearSpecter North Korea cybercrime Operation Heracles North Korea, crypto theft Clop Exploitation Asahi Cyberattack Rachel Reeves Cyber cryptocurrency seizure