Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
Sep 16, 2025Ravie LakshmananHardware Security / Vulnerability A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack…
Month: September 2025
Google introduces VaultGemma, a differentially private LLM built for secure data handling
Google has released VaultGemma, a large language model designed to keep sensitive data private during training. The model uses differential privacy techniques to prevent individual…
Insider breach at FinWise Bank exposes data of 689,000 AFF customers
Insider breach at FinWise Bank exposes data of 689,000 AFF customers Pierluigi Paganini September 16, 2025 An ex-employee caused an insider breach at FinWise Bank,…
New Phoenix Rowhammer Attack Variant Bypasses Protection With DDR5 Chips
A new Rowhammer attack variant named Phoenix can bypass the latest protections in modern DDR5 memory chips, researchers have revealed. The attack is the first…
Building security that protects customers, not just auditors
In this Help Net Security interview, Nir Rothenberg, CISO at Rapyd, discusses global differences in payment security maturity and the lessons that can be learned…
From records to real-time: why systems of engagement matter
Dean Swan, Vice President and General Manager of monday.com in APJ, says it’s a model that keeps organisations looking in the rear-view mirror. “On a…
Microsoft Resolves Bluetooth Audio Problem in Windows 11 24H2 Update
Microsoft has addressed a widespread audio issue affecting Bluetooth speakers, headsets, and integrated laptop speakers in Windows 11 version 24H2. The problem stemmed from an…
AI video surveillance could end privacy as we know it
AI-powered video surveillance brings up big questions about privacy. On one hand, it can make us feel safer, but on the other, it can easily…
40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
Sep 16, 2025Ravie LakshmananMalware / Cyber Attack Cybersecurity researchers have flagged a fresh software supply chain attack targeting the npm registry that has affected more…
Product showcase: Clean Links exposes what’s hiding behind a QR code
Clean Links is a handy app that shows you exactly where a link will take you before you click it. It strips out trackers, expands…
Massive Supply Chain Attack Hijacks ctrl/tinycolor With 2 Million Downloads
A sophisticated and widespread supply chain attack has struck the NPM ecosystem, compromising the popular @ctrl/tinycolor package, which is downloaded over 2 million times per…
Infostealer Malware and the Cartelisation of Cybercrime
By Jordan Cadzow and James van Rooyen Introduction The uncomfortable truth of our modern digital lives is that infostealer malware has become one of the…