Pentesting with Kali Linux

👀  "Popa" Botnet Linked to Publicly-Traded Israeli Firm

⚡  Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development

❗ Palo Alto Networks Warns That Attackers Are Actively Exploiting VPN Bypasses Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, a PAN-OS authentication bypass vulnerability affecting GlobalProtect portals and gateways.

🐾 Conti Ransomware Member Pleads Guilty in the US Ukrainian national Oleksii Lytvynenko, 44, extradited from Ireland, pleaded guilty to conspiracy to commit wire fraud for his role in Conti ransomware attacks in 2021–2022 — encrypting victims' systems, stealing data, and extorting Bitcoin ransoms from organizations across the US and beyond.

🕷️ Scattered Spider Roundup Tyler Buchanan, 24 ("ringleader"), pleaded guilty to wire fraud and aggravated identity theft — netting $8M+ in crypto via SMS phishing and social engineering. Faces up to 22 years, sentencing set for August 2026. Meanwhile, a 19-year-old Finnish suspect known as "Bouquet" is facing US extradition on wire fraud, conspiracy, and computer intrusion charges — allegedly participating in at least four Scattered Spider attacks, the first when he was just 16.

🔴 RoguePlanet — New Windows 0-Day (UNPATCHED) Researcher "Nightmare Eclipse" released a new Microsoft Defender zero-day that affects fully patched Windows 10 and 11, letting attackers spawn a SYSTEM-level shell via a race condition in Defender. PoC is public and confirmed by multiple researchers.

Anthropic's Claude Fable 5 Model Has Reportedly Been Leaked (or is this a deliberate strategy to bypass the US government's restrictions?) An anonymous researcher shared information regarding this data leak on a private Discord server before removing the content within five minutes.

https://www.thehacker.recipes/ad/movement/kerberos/relay

#CobaltStrike #Aggressor #scripts https://github.com/harleyQu1nn/AggressorScripts https://github.com/Und3rf10w/Aggressor-scripts https://github.com/rasta-mouse/Aggressor-Script https://github.com/bluscreenofjeff/AggressorScripts https://github.com/armata/cobalt-strike-scripts https://github.com/kussic/CS-KickassBot https://github.com/killswitch-GUI/CobaltStrike-ToolKit https://github.com/rsmudge/ElevateKit https://github.com/vulp1n3/Aggressor_Scripts/blob/master/beacon_tweaks.cna

https://github.com/infosecn1nja/AD-Attack-Defense

https://www.mindmeister.com/es/70567774/penetration-testing-execution-standard

https://github.com/iomoath/PyExchangePasswordSpray

https://www.youtube.com/watch?v=pL9q2lOZ1Fw

https://github.com/redcode-labs/Citadel

https://github.com/redcanaryco/atomic-red-team

https://github.com/DarkCoderSc/win-brute-logon

https://digital-forensics.sans.org/community/downloads