If you use Google Chrome on your computer or Android phone, stop what you are doing for a minute. Google has just issued an emergency alert affecting billions of users worldwide. This is not to cause panic, but to act fast. A new “invisible” security flaw has been discovered, and hackers already know how to […]
Urgent Security Alert: Update Google Chrome and Android Now (Zero-Day Exploit) Read More »
Text documents are extremely common attack vectors. Often, we receive a file that seems harmless but can hide malicious scripts (macros) or phishing links. In this tutorial, I will show how I performed a forensic analysis on an .odt (LibreOffice) file using only the Linux terminal. We will discover if the file has hidden macros,
ODT File Forensics: Detecting Macros and Phishing on Linux Read More »
Kali Linux is the standard Swiss Army knife for any cybersecurity professional. Its repository is vast, but here’s an inconvenient truth: not all tools are created equal. Many of them, although historically important, are now obsolete, noisy, or have simply been surpassed by much faster and more efficient alternatives. Using obsolete tools isn’t just inefficient;
5 Obsolete Kali Linux Tools and Their Modern Replacements Read More »
In recent weeks, this new banking trojan (malware focused on stealing bank data) has exploded in the country. Reports from companies like Kaspersky indicate tens of thousands of infection attempts, all starting the same way: a simple message on WhatsApp. The message, often coming from a known contact, contains a .ZIP file and a curious
Maverick Malware: Why the WhatsApp (.ZIP) Scam Only Works on a PC Read More »
If you are a Windows systems administrator or manage a company’s IT infrastructure, stop what you are doing and read this. Microsoft has just issued a security alert of the highest severity, requiring an “out-of-band” update (outside the normal cycle) for Windows Server Update Services (WSUS). The reason? A critical security flaw, tracked as CVE-2025-59287,
Today, we’re going to dive into an attack tactic that, despite its simplicity and reliance on social engineering, has proven incredibly effective at bypassing defenses and achieving remote code execution (RCE): ClickFix. Popularized by researchers like John Hammond and documented in the ClickGrab project, ClickFix is a stark reminder that “layer 8” (the user) remains
The ClickFix Attack: How “Copy & Paste” Leads to Remote Code Execution (RCE) Read More »
When setting up a new Linux server, one of the first tasks for any system administrator is to configure the firewall. Usually, this involves allowing access to essential services, such as SSH (Port 22), so we can manage it remotely. The standard command for this is sudo ufw allow ssh. But there’s a silent problem
UFW Limit: The Smart Defense Against Brute-Force Attacks Read More »
Keeping a server secure is an ongoing task, and one of the biggest threats is malicious software that hides in the system to grant an attacker persistent access. The most dangerous among them are rootkits. In this tutorial, we will introduce an essential, top-tier tool for any system administrator: the chkrootkit. It is a lightweight
How to Scan for Rootkits and Malware on Linux Servers with chkrootkit Read More »
We present an IDS Installation and Configuration Tutorial on Linux Ubuntu. AIDE is also known as a HIDS that acts very well to check the safety of your critical files. What is AIDE? AIDE (Advanced Intrian Detection Environment) is a host-based intrusion detection system (HIDS) that acts as a “digital watchman” for your critical files.
AIDE : IDS for Linux Ubuntu Installation and Configuration Read More »
In this article, we will see the main reasons for considering the use of Kali Linux in a virtualized environment and how it can boost your learning and work on cybersecurity tests. Kali Linux is undoubtedly one of the most popular distributions for professionals and information security enthusiasts. By choosing to run it inside a
Why use Kali Linux inside VirtualBox? Read More »
