Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
UltimateWDACBypassList Updated on Kitploit
Kitploit announces an update to UltimateWDACBypassList, a tool for bypassing Windows Defender Application Control. It aids security testing.
Kankun Smart Socket Hijack PoC Released
A proof-of-concept exploits a hardcoded AES-256 key in Kankun smart sockets, allowing command hijacking and password sniffing.
CVE-2026-41940 Updated on Kitploit
Kitploit announces an update for CVE-2026-41940, a vulnerability relevant to cybersecurity and penetration testing tools.
Device Makers Publish Security Metrics for Health Systems
Medical device manufacturers released product security measurements they use internally, which health systems can now request to assess vendor maturit
AI Vulnerability Surge May Be More Manageable Than Feared
New research suggests the coming wave of AI-related vulnerabilities may be less overwhelming for enterprises if they adopt the right strategies.
SonicWall SMA 1000 Zero-Days Allow Unauthenticated RCE
Attackers are exploiting zero-day vulnerabilities in SonicWall SMA 1000 devices, enabling unauthenticated remote code execution.
MouseJack: Wireless Mouse Hijacking Tool
MouseJack is a tool that exploits vulnerabilities in wireless mice and keyboards to inject keystrokes remotely.
ECDSA Private Key Recovery Tool Released
A new tool for ECDSA private key recovery has been published on Kitploit, aiding security researchers in vulnerability analysis.
CrowdStrike Blocks Malicious Open-Source Packages at
CrowdStrike announced a new offering at Fal.con 2026 that blocks malicious open-source packages at the endpoint before code execution, extending its s
AI Coding Agents at Risk from Malicious Git Configs
Manifold Security found eight flaws in seven AI coding agents where malicious .git configs execute attacker code. Four remain unpatched.
BGP Hijack Used to Push Malicious Virtualizor Update
Hackers hijacked BGP to divert Softaculous traffic and deliver a malicious Virtualizor package, compromising root access on some hypervisors.
SonicWall SMA1000 zero-days exploited in attacks
SonicWall warns of active exploitation of two chained zero-days in SMA1000 appliances. Hotfixes are available; no workarounds exist.