You’ve hunted down a complete compromise. Now let’s build proactive detections. In this post, we’ll explore how to create SPL searches…

berbeda dengan tulisan saya sebelumnya, saya disini akan mengerjakan soal dengan tipe kernel exploitation. hal ini pada dasarnya masih…

Google engineer Eric Biggers submitted patches to Linux, accelerating the HCTR2 cryptographic mode by up to 53% by optimizing the underlying POLYVAL implementation.

KDE Discover is a beginner-friendly graphical app store for Linux. Learn how to install it on Raspberry Pi OS to manage, install, and update applications without the terminal.

Microsoft confirms Windows 11 26H1 (Build 28000). It's a non-general release for platform-level support of new ARM chips, like the forthcoming Snapdragon X2 processor.

VPN installs surged 1,400% after UK age checks, prompting ban debates in the US/UK. Google warns that threat actors are now disguising spyware as free VPN apps.

Microsoft is testing a hidden "Haptic signals" setting in Windows 11 to add subtle vibrations for UI actions like window snapping and object alignment on compatible hardware.

A critical Triofox zero-day (CVE-2025-12480) was exploited by UNC6485. Attackers bypassed auth via Host header, created an admin, and ran code as SYSTEM via the AV check.

An EFF investigation found that most Android antivirus apps fail to detect stalkerware. Malwarebytes detected 100%, while Google Play Protect found just over half.

DonPwner is a new dual-use tool for automating credential analysis and password spraying against Active Directory, built on DonPAPI for authorized security testing.

Linux Kernel developers are pushing to enable the -fms-extensions flag for GCC/LLVM, which would allow Microsoft C Extensions in the kernel and debut in version 6.19.

North Korea's KONNI APT group is exploiting stolen Google credentials to abuse the Find My Device service, remotely wiping Android phones to erase data and traces.

NoMoreStealers is an open-source Windows PoC using a kernel MiniFilter driver to block unauthorized access to sensitive folders (like browser profiles) by untrusted processes.

Google released an urgent Chrome update (v142.0.7444.162) patching a High-severity V8 flaw (CVE-2025-13042). The "inappropriate implementation" issue risks remote code execution. Update immediately.

Broadcom partnered with CAMB.AI to develop an AI chip for real-time, on-device audio translation and dubbing in 150+ languages, promising ultra-low latency.

Apache OpenOffice 4.1.16 fixes seven security flaws, including a memory corruption bug and six issues that allow unprompted loading of remote content via documents, risking system info leak and malware delivery.

If you hack Windows for a living, authentication is the battlefield. Two heavyweights duke it out under the hood: NTLM (old, ubiquitous)…

This is for Educational Purpose Only , Don’t Perform any operations without the proper permission of the owner

This document summarizes key cyber threats identified between November 3 and November 9, 2025, including related threat events

Subtitle: I learned to see the unseen. Today was about mapping the local network, listening to its traffic, and understanding the language…

1. Broken Access Control