Cybersecurity

I Mapped an Entire Building’s RF Footprint Without Walking Inside. Here’s How.

A 200$ drone, a 25$ SDR dongle, and an afternoon. That’s all it took. It started with a bet. A fri…

The Phone the NSA Doesn’t Want You to Own

Look. I have been doing this since before you were born. I have cracked systems that you would not e…

Wyze Doorbell Message

Just taking a shot.... anyone have an easy way to change the "Hi, you're being recorded" message? I …

CVE-2026-5038: CVE-2026-5038: Denial of Service via Incomplete File Cleanup in Multer diskStorage Engine

CVE-2026-5038: Denial of Service via Incomplete File Cleanup in Multer diskStorage Engine Vulnera…

Worth a MalExt Report? A 2 Million-User Chrome Extension Added Give Freely/Wildlink in a 5-Day Update

I've been reversing the 2M+ user Volume Booster Chrome extension and found something interesting. Be…

Hidden KYC: How Banks Silently Track Your WiFi Network

TL;DR In the summer of 2024, a major European retail bank detected a surge in synthetic identity f…

BSSID Collection: How Banks Map Your Home WiFi

TL;DR In 2024, a UK financial institution blocked a legitimate customer's account after a trip fro…

From IP Geolocation to WiFi Positioning: The KYC Evolution

TL;DR The landscape of Know Your Customer (KYC) verification is shifting from broad IP-based geolo…

Geo-KYC: Qué Hace Tu Banco En Secreto Con Tu WiFi

TL;DR En 2024, un usuario en México intentó realizar una transferencia internacional desde su comp…

CVE-2026-5079: CVE-2026-5079: Denial of Service via Uncontrolled Resource Consumption in Multer Multipart Parser

CVE-2026-5079: Denial of Service via Uncontrolled Resource Consumption in Multer Multipart Parser …

Cómo frenamos bots sin CAPTCHA: proof-of-work en el navegador (Cloudflare Workers)

En Multita tenemos una consulta de multas gratis y pública: poné una patente o un DNI y te traemos l…

Mobile view bug

There is a music streaming platform, which is supposed to only let registered users to play and down…