The Exploit Post

Sign in Subscribe

Red Dog Security

Phoenix Rowhammer Variant Bypasses DDR5 Protections, Grants Root in Under Two Minutes

Phoenix Rowhammer Variant Bypasses DDR5 Protections, Grants Root in Under Two Minutes

Researchers have developed a new Rowhammer variant — Phoenix — that can defeat recent protection mechanisms in SK Hynix DDR5 chips and escalate to root on vulnerable systems in under two minutes. Rowhammer, first demonstrated by researchers at Carnegie Mellon University in 2014, exploits the physical layout of DRAM. Repeated, rapid access

Self-Propagating Malware Infects Over 180 npm Packages

Self-Propagating Malware Infects Over 180 npm Packages

Researchers have uncovered the compromise of more than 180 npm packages infected with self-propagating malware designed to spread to other packages. The campaign has been named Shai-Hulud, likely after the @ctrl/tinycolor package compromise—an npm package downloaded over 2 million times per week. The name comes from the shai-hulud.

Samsung Patches Zero-Day Vulnerability Exploited in Android Attacks

Samsung Patches Zero-Day Vulnerability Exploited in Android Attacks

Samsung has patched a zero-day remote code execution (RCE) vulnerability that was already being exploited in attacks against Android users. The flaw, tracked as CVE-2025-21043 with a CVSS score of 8.8, affects Samsung devices running Android 13 and newer. The issue was first disclosed on August 13, 2025, by

Pirate Sentenced to Four Years in Prison for Distributing Unreleased Films Online

Pirate Sentenced to Four Years in Prison for Distributing Unreleased Films Online

The U.S. Department of Justice (DOJ) announced that Steven Hale, a former employee of an unnamed international company, has been sentenced to nearly four years in prison for stealing hundreds of DVDs and Blu-rays containing unreleased films and distributing them online. Theft and Distribution In May 2025, Hale pleaded

Jaguar Land Rover Still Has Not Resumed Production After Cyberattack

Jaguar Land Rover Still Has Not Resumed Production After Cyberattack

Jaguar Land Rover (JLR) has yet to recover from the ransomware attack it suffered in early September, with production still halted and losses mounting. The company is believed to be losing between £5 million and £10 million per day (approximately 574 million to 1.148 billion rubles). Analysts warn the

WhiteCobra Group Deploys Malicious VSCode Extensions to Steal Cryptocurrency

WhiteCobra Group Deploys Malicious VSCode Extensions to Steal Cryptocurrency

Analysts at Koi Security have uncovered a campaign by the WhiteCobra hacker group targeting users of VSCode, Cursor, and Windsurf through malicious extensions published on both the Visual Studio Marketplace and the Open VSX registry. Researchers warn that the campaign remains active, as the attackers continue uploading new malware to

Apple Warned French Users About Spyware Attacks

Apple Warned French Users About Spyware Attacks

CERT-FR reported that at the end of last week, Apple issued warnings to users in France whose devices had been targeted by spyware attacks. According to the agency, at least four rounds of such notifications have been sent in 2025—on March 5, April 29, June 25, and September 3—