BLOG
Build notes, stack choices, and the way we ship for Indonesian teams.
Google patches 124 Android vulnerabilities in June 2026, including one actively exploited flaw allowing privilege escalation without user interaction.
Read more →
A sophisticated AiTM phishing campaign targeted 35,000 users in April 2026, bypassing 2FA by capturing session tokens after login. Here's how it worked and how to protect your organization.
Read more →
Google released urgent Chrome security update patching 16 vulnerabilities including two critical flaws (CVE-2026-9111, CVE-2026-9110) that could allow remote code execution and UI spoofing attacks.
Read more →
GitHub confirmed a breach where attackers accessed 3,800 internal repositories through a poisoned Visual Studio Code extension, highlighting the growing threat of supply chain attacks on developer tools.
Read more →
AI tools need identity, permissions, logs, and limits. Security strategy must evolve as agents start acting inside business systems.
Read more →
Critical Next.js vulnerability allows bypassing middleware-based authorization through pathname normalization inconsistencies.
Read more →
Symfony HTTP Foundation vulnerability allows authorization bypass through incorrect PATH_INFO parsing.
Read more →
Critical GoFiber vulnerability allows denial of service through crafted flash cookies that trigger massive memory allocation.
Read more →
Comprehensive analysis of OWASP Top 10:2025 changes, including new entries and modern security risks for web applications.
Read more →
GoFiber session fixation vulnerability allows attackers to hijack user sessions through predetermined session identifiers.
Read more →
The PHP Foundation's comprehensive 2025 security audit reveals critical findings and lessons for the PHP ecosystem.
Read more →
Critical Django SQL injection vulnerability through FilteredRelation dictionary expansion on PostgreSQL databases.
Read more →
Django authentication vulnerability allows user enumeration through timing differences in password validation.
Read more →
Critical Laravel vulnerability allows environment manipulation through crafted query strings when register_argc_argv is enabled.
Read more →
High-severity Express.js body-parser vulnerability allows denial of service attacks through crafted URL-encoded payloads.
Read more →
