Amidst internal conflicts and developer departures, new open-source kernels like Managarm, Asterinas, and Xous are emerging with innovative designs and security features.

A new AI-powered hacking tool, Villager, has been downloaded nearly 10,000 times, making sophisticated cyberattacks accessible to new users.

Researchers at ESET have reported the emergence of a new ransomware strain dubbed HybridPetya, which blends techniques from

Samsung has patched a critical zero-day vulnerability (CVE-2025-21043) in its Android devices that was actively being exploited. Update your phone now.

The Vastaamo center hacker, Alexander Kivimäki, has been released from custody pending his appeal. Learn why the court freed him despite his conviction.

A critical FreePBX vulnerability (CVE-2025-57819) is being actively exploited to take over phone systems. Learn about the flaw and how to patch it now.

Nulled (pirated) WordPress plugins are being used in a new malware campaign to create backdoors and hijack sites. Learn how to protect your website.

A new phishing-as-a-service platform, VoidProxy, is actively stealing Microsoft and Google credentials, MFA codes, and session tokens. Learn how to protect your accounts.

Declassified documents reveal ICE used a "Stingray" cell-site simulator to track a fugitive, reigniting debate over government surveillance and civilian privacy.

Apple's AI chatbot guidelines were revised after Trump’s return, removing "systemic racism" and adding new political topics. Find out what changed.

Windows 11 is getting a built-in network speed test, but a closer look reveals it's just a shortcut to a Bing web page. Is it a real improvement?

A critical flaw (CVE-2025-58434) in FlowiseAI allows unauthenticated attackers to hijack any account. The bug has a CVSS 9.8 score, and a PoC has been released.

Most people think cyber attacks only happen to big companies or governments. But the truth is: anyone with an internet connection is a…

Pernah nonton film Hacking?

Early this month, I took on a challenge to acquire cybersecurity skills. So far, it has been quite an enjoyable journey! I have already…

While preparing for OSCP+ I worked on Blackfield, an Active Directory machine on Hack The Box. This box is a great example of chaining…

A cyber gang has built a powerful new trojan, CastleRAT, that steals everything from passwords to crypto wallets with frightening…

Attackers are exploiting Windows Defender Application Control (WDAC) policies to disable Endpoint Detection and Response (EDR) agents…

In cybersecurity, healthcare and everyday tools like spam filters, two key concepts are often come up, False Positives and False Negatives…

Learn how IAM secures access, tools used, and why it’s important in IT Security

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…