One chapter into the book Network Attacks and Exploitation: A Framework by Matthew Monte and I'd ordered a second copy to give to a friend. Three chapters in, and I thought it should be required ...

The post-exploitation tools market has chalked up a newcomer with the emergence of Exfiltrator-22. An upstart alternative to Cobalt Strike, the Exfiltrator-22 framework-as-a-service (FaaS) tool set, ...

Instead of relying on premade and well-known toolkits, the threat actors behind the TrickBot trojan decided to develop a private post-exploitation toolkit called PowerTrick to spread malware laterally ...

Microsoft Outlook can be turned into a C2 beacon to remotely execute code, as demonstrated by a new red team post-exploitation framework named "Specula," released today by cybersecurity firm ...

The commercial spyware industry has increasingly come under fire for selling powerful surveillance tools to anyone who can pay, from governments to criminals around the world. Across the European ...

Security researchers spotted a new ClickFix campaign The goal is to deploy the Havoc post-exploitation framework The ...

There are increasing reports of Mac OS malware and viruses, though, so far, the deluge that some security experts have predicted hasn’t arrive. In fact, there’s a new report that reinforces the Mac’s ...

In October 2025, Kaspersky Lab specialists discovered a malicious https-proxy-utils package in the popular npm open source software repository. It is disguised as legitimate tools for using proxies in ...

Chandrasekhar said that ‘big powerful commercial platforms online’ have started to distort the internet’s fundamental characteristic of openness We certainly don't like that the issue is not allowing ...

A Barcelona-based company that bills itself as a custom security solutions provider exploited several zero-day vulnerabilities in Windows, and Chrome and Firefox browsers to plant spyware, say Google ...