Android 17 Update: Which Security Changes Actually Protect Your Phone?
Android 17 tightens local network access, SMS OTP handling and sensitive-data sharing. Understand the limits and what users and app teams should verify.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
ClingSTUN: Linux Backdoor Uses Public STUN Servers After IoT Exploitation
ClingSTUN turns vulnerable Linux devices into proxy backdoors. Learn what STUN traffic proves, which persistence traces matter, and how to close the entry points.
Nordic Cyberattacks, August–September 2026: Data Theft, Service Disruption and ClickFix
A sourced Nordic review of CPR, Ryde, Dustin, Norwegian DDoS attacks and malicious websites in Finland and Iceland, with an early-October update.
Open Weights, Centralized Power: Who Controls Access to Open AI?
NVIDIA's Hugging Face deal, a GLM-5.3 takedown, and Pirate Face expose the gap between open model weights and dependable access.
Russia's Hybrid Campaign Against Europe: Cyberattacks, Sabotage, and Information Warfare
How Russian hybrid operations exploit Europe's digital systems, infrastructure, and public trust — and how defenders can connect the evidence, reduce exposure, and respond.
Check Point VPN and Management Flaws Under Attack: Patch Two Different Trust Boundaries
Check Point confirms exploitation of a VPN gateway RCE and a separate management-server zero-day. Identify the affected roles, install both fixes, and investigate earlier exposure.
PixelLeak: How Coding Agents Put Private Screenshots on Public GitHub
Glow Labs found coding agents publishing internal screenshots to public GitHub repositories. Trace the exposure, contain sensitive images, and put enforceable limits on agent uploads.