A targeted attack discovered last week serving up malware from the U.S. Department of Labor's (DOL) website employed a previously unknown vulnerability in Internet Explorer 8 that Microsoft says it ...

The penetration testing world saw a couple of exciting announcements yesterday. The first one I want to mention because it's one of my favorite tools -- Burp Suite Professional. It's a great tool for ...

Adobe doesn’t plan to patch the newest critical vulnerability in its PDF viewing and editing software for another four weeks, even though attack code has been publicly released. Adobe won’t patch the ...

The first functional exploit code for the recently-patched BlueKeep vulnerability in Windows' Remote Desktop Services (RDS) functionality has been released, as part of the Metasploit Framework project ...

Next month, Moore will raise the already-high stakes when Metasploit releases a new piece of code--called eVade-o-Matic--that makes it harder for intrusion-detection systems and antivirus software to ...

Code has been posted to the Metasploit Project site, which rolls out exploit modules for its Framework tool on a regular basis. The code targets the so-called "Safe file" flaw in Apple's Safari ...