Pentesting News

Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers https://securityaffairs.com/197287/cyber-crime/sophisticated-cyberattack-exposes-data-of-678000-french-taxpayers.html

Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION https://securityaffairs.com/197288/breaking-news/security-affairs-newsletter-round-590-by-pierluigi-paganini-international-edition.html

APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2 https://securityaffairs.com/197266/intelligence/apt36-suspected-in-patchcord-espionage-campaign-using-google-sheets-c2.html

Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware https://securityaffairs.com/197251/uncategorized/crooks-are-buying-your-expired-domains-and-using-them-to-deliver-malware.html

SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html

macOS Screen Sharing Flaw Exploited to Deploy Monero Miners https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html

Microsoft Entra ID Makes Passkeys Default, Retires SMS and Voice MFA in 2027 for Better Security https://gbhackers.com/microsoft-entra-id-makes-passkeys-default/

Ruby 4.0 Marshal.load RCE Gadget Chain Exposes Critical Deserialization Risk https://gbhackers.com/ruby-4-0-marshal-load-rce-gadget-chain/

Download More RAM Attack Bypasses Windows VBS, HVCI and Disables Microsoft Defender https://gbhackers.com/download-more-ram-attack-bypasses-windows-vbs/

Microsoft Copilot App Overhaul Merges Personal Chats and Ends Podcasts, Deep Research https://gbhackers.com/microsoft-copilot-update-merges-chats-retires-podcast/

GeoServer Zero-Day Is Already Being Probed. That’s the Problem https://securityaffairs.com/197216/hacking/geoserver-zero-day-is-already-being-probed-thats-the-problem.html

Apple warned hundreds of users of mercenary spyware attacks https://securityaffairs.com/197208/malware/apple-warned-hundreds-of-users-of-mercenary-spyware-attacks.html

Agentic AI Models Rebuild Malware and Sustain Real-World Cyber Intrusions, SentinelOne Warns https://gbhackers.com/agentic-ai-models-rebuild-malware/

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/

Who’s Tracking You? Use This New Service to Find Out https://krebsonsecurity.com/2026/08/whos-tracking-you-use-this-new-service-to-find-out/

GeoServer Zero-Day SQL Injection Vulnerability Actively Exploited to Gain RCE https://gbhackers.com/geoserver-zero-day-sql-injection-vulnerability/

Dysphoria Hijacks Routers, Gateways and IP Cameras to Build Massive IoT Botnet https://gbhackers.com/dysphoria-hijacks-routers/

Malicious SVG Reconstructs DCRat Archive Entirely Inside Victim’s Browser https://gbhackers.com/malicious-svg-reconstructs-dcrat-archive-entirely-inside-victims-browser/

AmnesiaStealer Gives Attackers Live Control of Victims’ macOS Browsers https://securityaffairs.com/197190/malware/amnesiastealer-gives-attackers-live-control-of-victims-macos-browsers.html

Chess.com Leak Exposes 7.3 Million Users – Evidence Points to Scraping https://securityaffairs.com/197174/breaking-news/chess-com-leak-exposes-7-3-million-users-evidence-points-to-scraping.html