Google fixes two Android zero days exploited in attacks, 107 flaws

Published on December 2, 2025

Google has released the December 2025 Android security bulletin, addressing 107 vulnerabilities, including two flaws actively exploited in targeted attacks. [...]

Continue reading on website
Other news

Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools

December 2, 2025
Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence (AI)-driven security scanners.The package in question is eslint-plugin-unicorn-ts-2, which masquerades as a TypeScript extension of the popular ESLint plugin. It was uploaded to the registry by a user named "hamburgerisland" in February 2024. The package has been downloaded

North Korea lures engineers to rent identities in fake IT worker scheme

December 2, 2025
In an unprecedented intelligence operation, security researchers exposed how North Korean IT recruiters target and lure developers into renting their identities for illicit fundraising. [...]