Juni Artawan

How Samsung Knox Strengthens Network Security for Mobile Devices

Enterprise network security has improved over the years, but mobile devices remain a major weak spot. Unlike traditional endpoints, smartphones constantly switch networks, run many apps, and access sensitive data from anywhere. This makes them…
Read more: How Samsung Knox Strengthens Network Security for Mobile Devices
Claude Opus 4.6 Shows How AI Can Uncover Critical Open-Source Vulnerabilities

Anthropic has announced that its latest AI model, Claude Opus 4.6, has discovered over 500 previously unknown high-severity security flaws in widely used open-source libraries, including Ghostscript, OpenSC, and CGIF. This highlights the growing role…
Read more: Claude Opus 4.6 Shows How AI Can Uncover Critical Open-Source Vulnerabilities
Fake Python Spellchecker Packages on PyPI Spread Hidden RAT Malware

Security researchers have uncovered malicious Python packages on PyPI that pretended to be simple spellchecker tools but secretly delivered a remote access trojan (RAT). The packages, spellcheckerpy and spellcheckpy, were downloaded over 1,000 times before…
Read more: Fake Python Spellchecker Packages on PyPI Spread Hidden RAT Malware
When to Use Virtual Machines and When Containers Make More Sense

In modern IT environments, Virtual Machines (VMs) and containers are widely used to run applications and services. While they may look similar on the surface, they serve different purposes. Knowing when to use a VM…
Read more: When to Use Virtual Machines and When Containers Make More Sense
Fake VS Code AI Extension Used to Deploy Malware via Moltbot Name

Security researchers have discovered a malicious Visual Studio Code extension that impersonated Moltbot (formerly Clawdbot) and claimed to be a free AI coding assistant. The extension was published on the official VS Code Marketplace before…
Read more: Fake VS Code AI Extension Used to Deploy Malware via Moltbot Name
Google Gemini Security Issue Enabled Silent Access to Private Calendar Events

Security researchers have uncovered a Google Gemini prompt injection vulnerability that allowed attackers to access private Google Calendar data using malicious calendar invites. The flaw abused indirect prompt injection, bypassing authorization controls without direct user…
Read more: Google Gemini Security Issue Enabled Silent Access to Private Calendar Events
LastPass Phishing Scams Resurface, Users Urged to Stay Alert

LastPass is warning users about a renewed phishing campaign impersonating the official LastPass service. The attack aims to steal users’ master passwords by sending fake emails that claim an upcoming system maintenance and urge recipients…
Read more: LastPass Phishing Scams Resurface, Users Urged to Stay Alert
Fortinet Patches Critical FortiSIEM Vulnerability Allowing Remote Code Execution

Fortinet has released security updates to fix a critical vulnerability in FortiSIEM that could allow an attacker to execute code remotely without authentication. The flaw is tracked as CVE-2025-64155 and has a CVSS score of…
Read more: Fortinet Patches Critical FortiSIEM Vulnerability Allowing Remote Code Execution
EDR or XDR? Which One to Choose?

EDR (Endpoint Detection and Response) and XDR (Extended Detection and Response) are two essential cybersecurity solutions in today’s threat landscape, where digital attacks such as ransomware, malware, and phishing continue to grow in both frequency…
Read more: EDR or XDR? Which One to Choose?
Advanced VoidLink Linux Malware Targets Cloud and Container Environments

Cybersecurity researchers have uncovered a new and highly advanced Linux malware framework called VoidLink, designed specifically to operate in cloud and container environments. First discovered in December 2025, this malware is considered a serious threat…
Read more: Advanced VoidLink Linux Malware Targets Cloud and Container Environments