Inhaltsverzeichnis für August 2025 in Hackercool Magazine

If you use Mozilla Firefox browser, then this is very important to you. In the recent advisory Mozilla has revealed that 9 vulnerabilities have been detected in Firefox browser. The most dangerous of these vulnerabilities is a remote code execution vulnerability. About the vulnerabilities Let’s learn about each of these vulnerabilities detected in detail. 1) CVE-2025-9179: This is a sandbox escape vulnerability present in the Audio/Video GMP (Gecko Media Plugin) component. This component is responsible for handling encrypted media content. This vulnerability enables memory corruption within the heavily sandboxed GMP process. This can allow hackers to elevate privileges beyond the standard content process restriction. It has been reported by security researcher Oskar. 2) CVE-2025-9180: This vulnerability affects the Graphics Canvas 2D component and it under-mines the fundamental web security model which…

Hello, aspiring ethical hackers and pen testers. In “Hacking Lab” feature of this month, we are going to show you how to create a Amazon Web Services (AWS) penetration testing lab for beginners. Creating an Amazon Web Services (AWS) penetration testing lab plays an important role for cyber security professionals and cloud engineers. Why an AWS pen test lab is important? More and more services are moving to cloud nowadays. According to Gartner, cloud environment usage is going to increase by 21.5% in 2025 compared to 2024. Cloud environment introduces new security principles that are completely different from traditional on-premises network. So, creating an AWS pen test lab lets us simulate real-world cloud attacks. It will also help us to understand practice testing misconfigurations in cloud, IAM issues, insecure storage…

When you ask ChatGPT or other AI assistants to help create misinformation, they typically refuse, with responses like “I cannot assist with creating false information.” But our tests show these safety measures are surprisingly shallow – often just a few words deep–making them alarmingly easy to circumvent. We have been investigating how AI language models can be manipulated to generate coordinated disinformation campaigns across social media platforms. What we found should concern anyone worried about the integrity of online information. The shallow safety problem We were inspired by a recent study from researchers at Princeton and Google. They showed current AI safety measures primarily work by controlling just the first few words of a response. If a model starts with “I cannot” or “I apologise”, it typically continues refusing throughout…

Then you will know the truth and the truth will set you free. John 8:32 Welcome to the latest issue of Hackercool magazine, where we continue our mission to simplify cybersecurity for you to stay ahead in the ever-evolving world of cybersecurity. In this Issue, we tackle a diverse set of topics, each aimed at strengthening your understanding of the threats and technologies shaping the digital landscape.. To begin with, we dive into how attackers use Windows shortcuts and Living-off-the-Land binaries (LOLBins) to execute attacks stealthily. A must-read for those wanting to understand modern hacking techniques. Next, we explain you 9 vulnerabilities found in Mozilla Firefox. If you're new to vulnerability analysis, this is a great place to start! Then, we bring you various features of Network Security Toolkit (NST),…

In What’s New feature of this month, we bring you a cybersecurity distro named Network Security Toolkit (NST). You may ask us what is the use of another cybersecurity distro when we already have distros like Kali, Parrot OS etc. Well, I agree. Kali and Parrot OS are favourites among Pen testers and Red teamers. However, sometimes we need specialists to use in special cases. Network Security Toolkit (NST) is a Fedora-based operating system aimed at monitoring and network diagnostics from a browser. It’s primary focus is on network monitoring, analysis and diagnostics while Kali and Parrot OS focus on penetration testing and offensive security. Its target users are Network administrators and Forensic analysts. This toolkit is developed to provide security professionals and network administrator with the easy access to…

WhatsApp has advised about a zero-click vulnerability in WhatsApp and WhatsApp Business app that have been already used in targeted exploitation in Apple iOS and macOS. About the vulnerability The zero-day vulnerability tracked as CVE-2025-55177 is a case of insufficient authorization of linked devices synchronization messages. What is Linked Device Synchronization? When you use WhatsApp on multiple devices like Desktop, WhatsApp Web, your secondary phone or tablet etc, you use Linked Devices feature in WhatsApp. When you link a device on WhatsApp, WhatsApp synchronizes your messages and account data to that device. This vulnerability is an insufficient authorization in this feature. The vulnerability affects WhatsApp for iOS prior to version 2.25.21.73, WhatsApp Business for iOS version 2.25.21.78 and WhatsApp for Mac Version 2.25.21.78. This is a zero-click attack which means…

A critical zero-day vulnerability has been confirmed in Apple iOS and iPadOS that is already under active exploitation. About the vulnerability The zero-day vulnerability tracked as CVE-2025-43300 is present in the core Image Input/Output framework in Apple’s operating systems. Image I/O framework handles and renders various image formats in Apple devices. The vulnerability is an out-of-bound-write issue in this framework. This vulnerability was discovered by Apple itself. iPhones running iOS version before 18.6.2, iPadOS versions less than 18.6.2 or iPadOS less than 17.7, macOS ventura prior to 13.7.8, macOS Sonoma prior to 14.7.8, macOS sequoia prior to 15.6.1 are vulnerable to this zero-day. "CVE-2025-43300 represents a sophisticated zero-day exploit actively leveraged to execute remote code on targeted Apple devices via crafted image files."–Apple Security Team How hackers can exploit this…

Weaponizing Windows Shortcuts & Living-off-the-Land (LOLBins) binaries While red teaming or pen testing, Windows shortcuts (.lnk) files are one of the most underestimated weapons. They are mostly overlooked as simple icons that make launching programs in Windows easier. But Windows shortcuts can be transformed into stealthy entry points for initial access, persistence, and lateral movement. When combined with Living-off-the-Land Binaries (LOLBins)—legitimate system utilities abused by adversaries—shortcuts become even more dangerous. In this Issue, you will learn how to weaponize Windows shortcuts with LOLbins for red teaming or a pen test. Let’s start with basics. What are Windows Shortcuts? File shortcuts in Windows are used to launch programs in minimized or maximized window states. They are also known as “Shell links” and are usually found on Windows Desktop. They were introduced…

A vulnerability has been detected in the widely used TablePress WordPress plugin. This vulnerability can impact more than 7,00,000 WordPress websites. About the vulnerability The TablePress plugin is a very popular plugin that enables WordPress users to create and manage tables with interesting features like sorting, pagination and search function. The vulnerability is a stored XSS vulnerability in the plugin’s code that allows hackers to inject malicious scripts into the website that run when someone visits compromised webpages. It affects all versions of the plugin upto 3.2. The vulnerability is present in the shortcode_debug parameter’s code of the plugin. The vulnerability is due to how the plugin handles this parameter. There is no input sanitization and output escaping while the plugin handles this parameter. How hackers can exploit this vulnerability?…

If you are an Android user, this is very important for you. Google has released security updates that fixes 120 security vulnerabilities in its Android operating system for September 2025. This includes at least two vulnerabilities that have been exploited in real-world. About the vulnerabilities Google has fixed over 120 vulnerabilities in it September 2025 update. Two of them are considered very dangerous as they are already under active exploitation. They are, CVE-2025-38352: With a CVSS score of 7.4, this is a privilege escalation vulnerability in the Linux kernel component. It is a race condition in the Linux Kernel time subsystem. A race vulnerability arises when different threads (process or programs) use the same resource but are not synchronized. This creates a brief period which a hacker can exploit. In…