Penligent Header

Hacking Labs

Windows Notepad CVE When Markdown Turns “Text” Into an Execution Boundary

Windows Notepad CVE: When Markdown Turns “Text” Into an Execution Boundary

Google Warns Hackers Are Leveraging Gemini AI Across Every Stage of Cyberattacks

Google Warns Hackers Are Leveraging Gemini AI Across Every Stage of Cyberattacks

CVE-2026-1731 BeyondTrust When “Remote Support” Behaves Like an Internet-Facing Identity System

CVE-2026-1731 BeyondTrust: When “Remote Support” Behaves Like an Internet-Facing Identity System

CVE-2026-20841 When Notepad Learns Markdown, a Click Can Become Execution

CVE-2026-20841 PoC: When Notepad Learns Markdown, a Click Can Become Execution

CVE-2026-21510 PoC The SmartScreen Moment That Never Happens

CVE-2026-21510 PoC: The SmartScreen Moment That Never Happens

Notepad RCE When a “Lightweight App” Learns Markdown, It Inherits Browser-Sized Risk

Notepad RCE: When a “Lightweight App” Learns Markdown, It Inherits Browser-Sized Risk

CVE-2025-49132 PoC The “Locale JSON” Endpoint That Turns Into Pre-Auth RCE

CVE-2025-49132 PoC: The “Locale JSON” Endpoint That Turns Into Pre-Auth RCE

CVE-2026-20841 PoC When “Just a Text Editor” Becomes a Link-to-Code Execution Primitive

CVE-2026-20841 PoC: When “Just a Text Editor” Becomes a Link-to-Code Execution Primitive

When Search Becomes the Payload Defending Against SEO GEO AEO Poisoning in the Real World

When Search Becomes the Payload: Defending Against SEO / GEO / AEO Poisoning in the Real World

When SKILL.md Becomes an Installer The OpenClaw ClawHub Poisoning Playbook

When SKILL.md Becomes an Installer: The OpenClaw ClawHub Poisoning Playbook

Penligent Footer

English