A surprising announcement has come from the cybercrime world. A group calling itself Scattered Lapsus$ Hunters, along with several other well-known hacker aliases, has declared that they are ending their hacking spree. The group posted messages on Telegram and BreachForums, saying they would “go dark” and stop their offensive operations. In their farewell message, the … Continued
A North Korean hacking group known as Kimsuky has carried out a new cyberattack against South Korea by using artificial intelligence to generate fake military identification cards. Security researchers discovered that the group used these forged IDs in targeted phishing campaigns aimed at organizations linked to South Korea’s defense sector. Researchers from Genians, a South … Continued
Researchers from ETH Zürich and Google have revealed a new RowHammer attack called Phoenix, which is able to defeat the protections built into DDR5 memory modules. The team demonstrated that Phoenix could reliably trigger bit flips and escalate privileges on real DDR5 hardware, completing one exploit in as little as 109 seconds. This finding proves … Continued
A significant security breach has recently affected the npm ecosystem, compromising over 40 packages maintained by various developers. The attack involved the injection of a malicious script named bundle.js into these packages, enabling unauthorized access to sensitive credentials. The compromised packages were updated with a function called NpmModule.updatePackage. This function downloads the package’s tarball, modifies … Continued
A new AI-powered penetration testing tool called Villager has quickly gained attention in the cybersecurity world after being downloaded nearly 11,000 times from PyPI since its release in late July 2025. The tool is linked to a China-based group named Cyberspike, and experts are raising alarms because it could easily be misused by cybercriminals. Villager … Continued
In today’s fast-moving software landscape, web apps face ever-more sophisticated attacks. For example, Verizon’s 2024 breach report shows a 180% jump in attacks exploiting application vulnerabilities in 2023. This means choosing the right security testing tool is critical. The right tool helps your team find flaws early, cut false alarms, and fit seamlessly into your … Continued
In an era of rapid DevOps and cloud-native development, protecting code and applications is mission-critical. Leading AppSec vendors now offer broad platforms covering static/dynamic analysis, open-source scanning, container and mobile security, and even runtime self-protection. These tools integrate into CI/CD pipelines and IDEs, enabling “shift-left” security. Below we highlight ten standout companies (enterprise giants and … Continued
A serious security problem has been discovered in Cursor, the AI-powered code editor. Researchers revealed that malicious code can run on a developer’s computer the very moment a project folder is opened in Cursor, and the frightening part is that it happens without any warning or confirmation prompt. The flaw exists because Cursor ships with … Continued
A new wave of malware known as EvilAI is worrying security researchers because it uses artificial intelligence to stay hidden and look trustworthy. Instead of being obvious viruses, these threats are disguised as normal productivity or AI apps. At first glance, they seem safe, but once installed, they quietly deliver harmful code into a system. … Continued
A Ukrainian man accused of carrying out large-scale ransomware attacks has officially been added to Europe’s Most Wanted list. Authorities say he played a key role in cyberattacks that caused serious financial and operational damage to companies around the world. The fugitive has been identified as Volodymyr Viktorovych Tymoshchuk, a 28-year-old Ukrainian citizen. Law enforcement … Continued
