Researchers from ETH Zürich and Google have discovered "Phoenix" (CVE-2025-6202), a critical RowHammer attack that bypasses DDR5 memory protections and can achieve root-level system access in just 109 seconds. The vulnerability affects SK Hynix DDR5 modules manufactured between 2021-2024,...
Jaguar Land Rover has extended its production shutdown until September 24, 2025, following a major cyberattack in late August that disrupted global operations and resulted in data theft. The "Scattered Lapsus$ Hunters" group claimed responsibility, posting screenshots of internal systems a...
Cybersecurity researchers have discovered a sophisticated social engineering campaign called FileFix that impersonates Meta account suspension warnings to distribute StealC malware. This evolved ClickFix attack tricks users into copying malicious PowerShell commands disguised as file paths...
Browser-based attacks have emerged as a critical cybersecurity threat, with attackers using web browsers as gateways to compromise business applications and steal data from third-party services. This comprehensive analysis explores six key attack methods: advanced phishing operations that ...
Cybercriminals from the "Scattered Lapsus$ Hunters" group successfully created a fraudulent account in Google's Law Enforcement Request System (LERS), a platform used by police and intelligence agencies to request user data. While Google confirmed the breach and disabled the fake account, ...
