Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cloud Ransomware: How Storm-0501 Hackers Are Redefining Data Extortion

Ransomware is no longer confined to on-premise networks. A recent report from Microsoft reveals how Storm-0501, a notorious threat group, has pivoted its focus from traditional device encryption to cloud-based ransomware attacks. By exploiting native cloud features, these attackers bypass conventional malware defenses, exfiltrate sensitive data, destroy backups, and extort organizations—all without deploying traditional ransomware encryptors.

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident

On August 26–27, 2025 (UTC), eight malicious Nx and Nx Powerpack releases were pushed to npm across two version lines and were live for ~5 hours 20 minutes before removal. The attack also impacts the Nx Console VS Code extension.

Can My Hacked Account Be Recovered?

Few things are as alarming as discovering that one of your accounts has been hacked. Unfortunately, the reality is that recovering a hacked account is often very difficult – sometimes impossible. Here’s why getting your account back can be unlikely, what risks are involved, and how you can protect yourself from attacks.

Inside Bug Bounty Programs: How Hackers Help Secure Your Software | Secrets of AppSec Champions

Bug bounty programs are more than just rewards for hackers—they’re a gateway to stronger security, global collaboration, and even career transformation. In this episode, Netta Oren, cybersecurity manager and seasoned bug bounty advocate, shares how organizations can build successful bounty programs, responsibly manage disclosures, and create a win-win culture for both companies and ethical hackers.

Can AI hackers access the smart devices in my home? #ai #cybersecurity

New research shows how attackers could hijack Google's Gemini AI through a simple calendar invite to control smart lights, shutters, and even boilers. The key insight from our latest podcast is that it's not about the AI vulnerability, it's about network segmentation. The real lesson? Don't give AI systems direct access to your physical devices. The simple fix is to segment your IoT devices on separate networks.