Pada 2024, Indonesia memiliki lebih dari 185 juta pengguna internet dan menghadapi ratusan juta serangan siber setiap tahun. Serangan…

The Model Context Protocol (MCP) is transforming how AI systems communicate, share data, and coordinate actions. From connecting LLMs to…

Learn how to properly report, escalate, and communicate about high-risk SOC alerts.

Explore and learn about the Django CVE-2025–64459 vulnerability.

One Piece is a medium difficulty room on TryHackMe that tests our enumeration, cryptography, and privilege escalation skills.

Ryūjin is a research-grade Bin2Bin protector/obfuscator with features like MiniVM (Hyper-V isolation), junk code insertion, anti-debug, and TrollReversers (BSOD).

The ransomware market fragmented into 85 active groups in Q3 2025. LockBit 5.0 resurfaced, but Check Point notes the landscape is now highly fluid and less predictable.

Amazon uncovered one of the largest npm supply-chain attacks: over 150,000 packages published to flood the registry and fraudulently earn TEA cryptographic tokens.

ASUS released firmware 1.1.2.3_1010 to fix a critical authentication-bypass flaw (CVE-2025-59367) in DSL-AC51, DSL-N16, and DSL-AC750 routers. Update immediately!

The Kubernetes community will retire Ingress NGINX by March 2026 due to technical debt and security flaws, compelling users to migrate to alternatives like the Gateway API.

A UK court rejected Microsoft’s argument that reselling perpetual Windows/Office licences breaches copyright due to clipart/fonts, upholding the resale legality.

Windows Head Pavan Davuluri responded to intense backlash over the "Agentic OS" plan, acknowledging fundamental issues like UI inconsistencies and taskbar regressions.

WiFi 7's Multi-link Operation (MLO) creates new risks. Experts warn that misconfigurations across the 2.4, 5, and 6 GHz bands can expose the network to attacks.

JLR revealed its Q2 financial results were hit by the cyberattack: £196M in costs and a £485M pre-tax loss, confirming its severity and impact on the UK economy.

The XWiki zero-day (CVE-2025-24893, CVSS 9.8) is under active exploitation by cryptominers and the RondoDox botnet for DDoS attacks. CISA ordered immediate patching.

US nationals pleaded guilty to aiding North Korean IT workers in gaining remote US jobs via stolen/false identities and laptop farms, funneling over $2M to the regime.

APT42 launched "SpearSpecter," a campaign targeting defense officials and their relatives. It uses personalized social engineering and the stealthy, PowerShell-based TAMECAT malware.

Logitech disclosed unauthorized data exfiltration to the SEC, caused by a third-party zero-day flaw. The affected data includes some employee and customer information.

Akira ransomware revenue hit $244M. A joint warning reveals new tactics: exploiting VPN flaws (like CVE-2024-40766), using AnyDesk for persistence, and rapid data exfiltration.

Attackers are weaponizing the archaic Windows finger command (TCP 79) in ClickFix-style scams. The tool fetches malicious batch scripts, leading to system compromise and data theft.

Escalating tensions in the Red Sea, including Houthi attacks, are delaying major subsea cable projects like Meta’s 2Africa and Google’s Blue-Raman, forcing reliance on costlier routes.