ethical hackers Archives

Winsage

August 14, 2026

‘This one just needs a script’: Researchers find ultimate Windows kill switch which can disable antivirus w…

Researchers from the University of Birmingham and Durham University discovered a vulnerability in consumer DDR4 and DDR5 memory chips, termed "Download more RAM," which allows attackers to misreport memory configuration, potentially doubling the perceived RAM. This manipulation enables unauthorized access to memory allocations, bypassing Windows' Virtualization-based Security (VBS) and Hypervisor-Enforced Code Integrity (HVCI), and disabling antivirus software. The vulnerability affects major manufacturers like Corsair, G.Skill, and ADATA, which collectively hold over 55% of the high-performance memory market. Microsoft has patched the vulnerability, cataloged as CVE-2026-23670, with a medium severity score of 5.7/10, in the April 2026 Patch Tuesday update. Corsair has introduced a feature to enable write protection on their memory modules, and other tools are available for additional protection.

AppWizard

March 18, 2026

Belgium launches secure messaging app for government staff

Belgium has introduced Beam, a secure messaging application developed by Belgian Secure Communications (BSC), intended to replace platforms like WhatsApp and Messenger for public sector communications. It will serve around 750,000 civil servants and military personnel, with an initial deployment among defence and intelligence staff. Beam is designed to safeguard sensitive information by limiting access to verified government personnel and storing data on servers in Belgium. The application has been rigorously tested for security and is part of Belgium's effort to enhance official communication safeguards following the 2016 terrorist attacks.

AppWizard

March 18, 2026

New app provides secure messaging service for public sector employees

Beam is a secure messaging application developed by the state-backed Belgian Secure Communications (BSC) for approximately 750,000 public sector employees and military personnel in Belgium. The application is currently being used by defense and intelligence staff, with a broader rollout planned for next week. Beam is part of Belgium's investment in “sovereign communication systems” to protect sensitive data within national borders. It limits access to verified users, stores data on servers in Belgium, and has passed rigorous security testing by ethical hackers and cybersecurity firms. The rollout will occur in phases, developed internally within existing IT budgets.

Tech Optimizer

October 28, 2025

NordVPN revealed Americans’ false sense of online security with shocking Times Square ‘Talk to a hacker’ stunt

NordVPN launched an interactive billboard in Times Square as part of their "an antivirus is only half-protection" campaign, challenging the belief in the effectiveness of antivirus software. The campaign revealed that 73% of Americans incorrectly believe antivirus software protects them from identity theft and data breaches. Participants engaged with ethical hackers who demonstrated vulnerabilities, exposing personal information such as passwords and Social Security numbers. The campaign highlighted that over half of Americans trust antivirus software for online safety, yet many do not take precautions when using public Wi-Fi. Data breaches often expose contact information, leading to risks of phishing and identity theft. The billboard featured ethical hackers who provided insights on online safety, and NordVPN offers resources for checking data breaches and improving cybersecurity. NordVPN provides advanced security features and serves millions of users globally.

Winsage

March 15, 2025

Microsoft Pays Hackers $16.6 Million—But Windows Zero Days Continue

Microsoft's bug bounty program, established in 2013, has paid over million to ethical hackers for identifying vulnerabilities in its products. In the latest reporting period, Microsoft allocated .6 million to reward these contributions. External security researchers, referred to as hackers, are compensated through this program, which promotes coordinated vulnerability disclosure. A zero-day attack occurs when a vulnerability is known to the vendor but not yet patched, creating a risk for exploitation. While ethical hackers help reduce zero-day threats, some individuals exploit vulnerabilities for profit, highlighting that bug bounty programs cannot fully eliminate these risks.