HackingPassion.com
👻 home posts ethical hacking course newsletter shop whoami github youtube
HackingPassion.com
Hacking is not a hobby but a way of life

Ethical hacking,
zero to expert.

Hack like black hat hackers.
Penetration testing, Kali Linux, cybersecurity,
WiFi and web hacking,
and the mindset behind it.

View the course → The book
Ethical Hacking Complete Course Zero to Expert
The Book

Hacking Book

Everything I wish I had when I started. More than the course. Deeper explanations, real examples, the hacker mindset, and things I have never put online.

Coming soon Get notified when it drops → ← back to the course
SECURITY NEWS

Latest from the front line:

The newest CVEs, zero-days, malware, and breaches, taken apart so you can see how the attack works. I dig into the technical details, attack chains, and mistakes that made them possible.

All posts
A fake bank call told Dutch victims to hold their card to their phone. An app relayed the chip to an ATM. How NFC relay fraud works and spreads.
October 28, 2026

NFC Relay Scam Took €380,000 From About 170 Bank Customers in Three Weeks

A FreeCell file built in 1993 still opens on a fully updated Windows 11, and the same backward compatibility has given attackers a way in.
October 27, 2026

FreeCell From 1993 Still Runs Unchanged on Windows 11

Up to 3 million PCs and 350,000 Macs still ran a forgotten Popcorn Time updater with full rights. A security firm took it over to switch it off.
October 26, 2026

Popcorn Time Updater Left Millions of PCs Open to Whoever Owned Its Dead Web Addresses

A full queue of 256 events in Signal's calling code could block your hang-up and keep the microphone on. How it worked and which app versions fix it.
October 25, 2026

Signal Hang-Up Flaw Could Keep Your Microphone Open After the Call Ended

WhatsApp help pages hid rules for its support chatbot, including do not recommend a regulator. See the hidden code and how to get your account deleted.
October 24, 2026

WhatsApp Help Pages Hid Rules Telling Its Chatbot Not to Recommend a Privacy Regulator

Four chained Plex Media Server bugs let outsiders run code on home servers with no login. Fixed in August, exploited in the wild since October 17.
October 22, 2026

Plex2shell Home Servers Crypto Miner

Two critical PHP flaws called PHP2Shell let attackers hijack any web server with no login. See which versions are safe and how to patch fast.
October 21, 2026

PHP2Shell Flaw Leaves Millions of Websites Open to Takeover

Attackers paired a genuine, signed copy of Siemens Software Center with a malicious DLL and ran their code on Windows PCs that never installed it.
October 20, 2026

Siemens Software Center Ran Attackers' Code With a Valid Siemens Signature on PCs That Never Installed It

An ad that only had to load put Candiru spyware on devices at Al Jazeera. Discover-Tech slipped it through Google's ad system for six years.
October 19, 2026

Discover-Tech Ads Delivered Zero-Click Spyware to Al Jazeera While Google Approved the Company for Six Years

OPEN SOURCE

My Arsenal: from recon to root

I like building my own tools instead of waiting for someone else to. Then I put them on GitHub for free. Now hundreds of thousands of hackers and researchers use them.

THE LAB

More from the lab:

Tutorials, tools and deep dives. The evergreen stuff, from Linux and labs to hands-on hacking guides.

All posts
One Keurig smart coffee maker sent 1,008 GB in 10 days. Keurig's privacy policy has named a camera in its brewers since 2020, before they went on sale.
October 12, 2026

Keurig Smart Coffee Makers Have a Camera Inside and Keurig Wrote It Into Its Privacy Policy in 2020

Many color laser printers hide yellow dots with their serial number on each page. How the code works, how it was cracked and how to check your prints.
October 8, 2026

Printer Tracking Dots Put Your Color Laser Printer's Serial Number on the Pages You Print

Anon Eye makes your machine anonymous: all outgoing TCP, your name lookups, and a kill switch you can test yourself. Stop it and your machine is as you left it.
September 21, 2026

Anon Eye

Hiding your SSID gives you no protection. It forces your phone to call out your home network name in every room you walk into. Here is what happens.
August 31, 2026

Hiding your WiFi name doesn't protect you. It makes you a bigger target.

What eight messaging apps keep about you, what they hand a judge, and what has been broken. Taken from their own documents, not the marketing.
August 26, 2026

WhatsApp Signal Telegram and What Eight Messaging Apps Know About You

Researchers hid a working exploit in a strand of DNA for 89 dollars. When a sequencer read it, the computer running it opened a shell back to them.
July 14, 2026

DNA Carried Malware Into a Computer for 89 Dollars

NEWSLETTER

Stay updated

New posts in your inbox, about once a week when I find the time. Ethical hacking, security news, the tools I build, and now and then something I can't stop digging into.