How the Windows Snipping Tool’s CVE-2026-33829 Opens the Door to NTLM Hash Theft

How the Windows Snipping Tool’s CVE-2026-33829 Opens the Door to NTLM Hash Theft

Microsoft patched a moderate-severity flaw in the Windows Snipping Tool in the April 14, 2026 security updates that could let attackers trick the application into leaking authentication material. Tracked as CVE-2026-33829 and reported by Blackarrow (Tarlogic), the issue stems from how Snipping Tool handles certain deep links and can result in an authenticated Server Message Block (SMB) connection to an

Kali Linux 2026.1 Arrives — New Tools, NetHunter Breakthroughs, and a Nostalgic BackTrack Mode

Kali Linux 2026.1 Arrives — New Tools, NetHunter Breakthroughs, and a Nostalgic BackTrack Mode

Kali Linux’s first major release of 2026 lands with a mix of practical upgrades, fresh aesthetics, and a handful of features that will matter to both day-to-day penetration testers and mobile security researchers. Version 2026.1 brings a modernized look, an under‑the‑hood kernel bump, targeted NetHunter enhancements, and eight new offensive-security tools that expand Kali’s capabilities in post‑exploitation, web testing, and

Automate Your Claude Code Workflow: A Practical Guide to Scheduled Tasks

Automate Your Claude Code Workflow: A Practical Guide to Scheduled Tasks

A little automation goes a long way. If you spend any time monitoring deployments, babysitting long-running builds, checking back on pull requests, or simply reminding yourself to follow up on something later, Claude Code’s scheduled tasks give you a lightweight, session-scoped way to run prompts on a cadence. They let Claude re-run prompts automatically while your session is open, turning

CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know

CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know

AppArmor, a widely deployed Linux Mandatory Access Control (MAC) framework, is at the center of a set of serious vulnerabilities that researchers have dubbed “CrackArmor.” Disclosed on March 12, 2026 by the Qualys Threat Research Unit (TRU), the collection of flaws affects AppArmor’s implementation as a Linux Security Module (LSM) and has been present in the upstream kernel since around

When Local Trust Breaks: The OpenClaw 0-Click Vulnerability and What Developers Must Do Now

When Local Trust Breaks: The OpenClaw 0-Click Vulnerability and What Developers Must Do Now

The speed at which developer-facing AI agents have been adopted is staggering — and rapid adoption often outpaces secure design. A recent, high-impact vulnerability in OpenClaw demonstrates how a single innocuous browser visit can be transformed into a full agent takeover. For developers and security teams, this is a reminder that conveniences like “localhost-first” assumptions carry real risk. This post

When Kali Meets Claude: How AI and MCP Are Changing Penetration Testing

When Kali Meets Claude: How AI and MCP Are Changing Penetration Testing

The tools and workflows of penetration testing have evolved steadily over the past decade, but a recent shift feels more like a paradigm change than an incremental upgrade. Kali Linux — the distribution many security professionals rely on for reconnaissance, scanning, and exploitation — has been connected to a large language model via the open Model Context Protocol (MCP). The