Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
socks5 v0.8.0
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
Attempt to divert attention from backlash over UPI tax: Congress on govt's Parl panel claims
Congress denies supporting a parliamentary committee's report on UPI payment fees. The party accuses the government of diversion after a significant public backlash. Government sources claim Congress MPs backed a tiered Merchant Discount Rate framework. Congr
Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day
Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.
GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity
OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same sy
Cisco warns of max severity ISE zero-day exploited in attacks
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild.
Open-weight model developer Arcee AI reaches $1B-plus valuation with undisclosed Series B funding
Open-weight artificial intelligence model developer Arcee AI Inc. said today it has raised an undisclosed amount of cash in a Series B funding round that lifts its valuation to more than $1 billion. The round was led by Vista Equity Partners, Cambium Capital
AI agents can modify themselves without humans telling them to do so
The list of dodgy things AI agents can and will do on their own - like stealing people’s credentials, escaping onto the open internet, communicating via sneaky message boards, and hacking organizations - keeps growing. Agents can also replace their own underlying models without being instructed to d
Cramer bets AI spending will 'continue apace,' says he's not giving up on data center trade
CNBC's Jim Cramer said Wednesday that he's sticking with the AI trade despite a turbulent few days on growing safety concerns. After spending the week at Salesforce's annual Dreamforce conference i
CISA decides weekly vulnerability bulletin isn't necessary anymore
If you rely on the Cybersecurity and Infrastructure Security Agency’s weekly vulnerability bulletin to keep you up to date on the latest threats, we have bad news. It’s being discontinued at the end of September. CISA announced on Wednesday that its weekly vulnerability bulletin would stop going out
Trust becomes the product: Five takeaways from the Splunk .conf26 keynotes
In Denver this week, Cisco Systems Inc. and its Splunk unit made a bet that the scarcest resource in the agentic enterprise isn’t intelligence or graphics processing units — it’s trust. The Splunk .conf 2026 show themes and keynotes focused less on dashboards
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote at
Google Pixel phones pwned in zero-click attacks
Both Google and Uncle Sam warned that attackers have exploited a zero-day improper authorization bug in Pixel phones' cellular modems that can bypass permission checks and escalate privileges with no user interaction required. The hole has since been closed, provided that you update. Google disclose