Bleepingcomputer

Kali Linux 2025.4 Released with New Tools and Desktop Enhancements

First seen 12 Dec 2025, 16:53 UTC • •24.3

Article Content

1 / 5

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Kali Linux has launched version 2025.4, marking its final update for the year. This release includes three new tools, improvements to desktop environments, and enhanced support for Wayland. The update also features a redesigned app grid for better organization of tools.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 227d ago How this analysis works

More articles in this cluster (4)

Threat Graph

22 entities, 23 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Phishing
Sql Injection

Malware (1)

Hydra

Affected Platform (2)

Kali Linux
Windows

Tool (16)

Aircrack-ng
Bpf-linker
Burp Suite
Evil-winrm-py
Hexstrike-ai
John The Ripper
Kali NetHunter
Kon-boot
Magisk
Maltego
Metasploit Framework
Nmap
OpenVAS
Sqlmap
Wifipumpkin3
Wireshark

Vulnerability (1)

XSS

Relationships

Hydra exploits XSS
Aircrack-ng exploits XSS
Bpf-linker exploits XSS
Burp Suite exploits XSS
Evil-winrm-py exploits XSS
Hexstrike-ai exploits XSS
John The Ripper exploits XSS
Kali NetHunter exploits XSS
Kon-boot exploits XSS
Magisk exploits XSS
Maltego exploits XSS
Metasploit Framework exploits XSS
Nmap exploits XSS
OpenVAS exploits XSS
Sqlmap exploits XSS
Wifipumpkin3 exploits XSS
Wireshark exploits XSS
XSS targets Kali Linux
XSS targets Windows
Phishing targets Kali Linux
Phishing targets Windows
Sql Injection targets Kali Linux
Sql Injection targets Windows

Following this threat?

Track Hydra in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…