News

• A hacker has stolen sensitive Kimsuky files and logs
• They claim the group is "morally perverted", and hacks for "all the wrong reasons"
• But the leak will not dismantle the group, some argue

Kimsuky, a notorious North Korean state-sponsored threat actor, has been hacked by someone who claims not to be a cybercriminal but rather - an "artist".

The database is 8.9GB in size, and can be found on the “Distributed Denial of Secrets” website, containing logs, tools, and infrastructure used by the group, exposing their tactics, techniques, and procedures.

The haul contains phishing logs showing an attack against The Defense Counterintelligence Command (South Korean military intelligence security agency), different targeted domains, archives with the complete source code of South Korea’s Ministry of Foreign Affairs email platform (including webmail, admin, and other modules), a list of South Korean university professors, a toolkit for building phishing sites, Cobalt Strike loaders, and more.

Kimsuky is notorious for its cyber-espionage campaigns. The group’s earliest sightings were back in 2012, and since then, it was credited with numerous attacks against government agencies, think tanks, research institutions, and media outlets. It is particularly focused on Korean Peninsula affairs, nuclear policy, and foreign relations.

The hacker, going by Saber / cyb0rg, slammed Kimsuky for advancing state agendas:

“Kimsuky, you are not a hacker. You are driven by financial greed, to enrich your leaders, and to fulfill their political agenda,” a letter accompanying the dump reads. “You steal from others and favor your own. You value yourself above the others: You are morally perverted.”

“You hack for all the wrong reasons,” the letter concluded.

Although a commendable effort, this leak will probably not completely stop Kimsuky, a state-sponsored actor with formidable resources.

However, since many tools and methods have been “burned”, it could slow the group down, expose current campaigns, and force it to start from scratch in some cases.

Via BleepingComputer

• North Korean hackers have some deious new Linux backdoor attacks to target victims
• Take a look at our guide to the best authenticator app
• We've rounded up the best password managers

Listening to entrepreneurs discuss the potential of AI cybersecurity will give you déjà vu. The discussions are eerily similar to how we once talked about cloud computing when it emerged 15 years ago.

At least initially, there was a surprisingly prevalent misconception that the cloud was inherently more secure than on-premises infrastructure. In reality, the cloud was (and is) a massive attack surface. Innovation always creates new attack vectors, and to say AI is no exception is an understatement.

CISOs are generally aware of AI’s advantage, and for the most part they’re similarly aware that it’s creating new attack vectors. Those who took the right lessons from the development of cloud cybersecurity are right to be even more hesitant about AI.

Within the cloud, proper configuration of the right security controls keeps infrastructure relatively static. AI shifts faster and more dramatically, and is thus inherently more difficult to secure. Companies that got burned by being overeager about cloud infrastructure are now hesitant about AI for the same reasons.

The knowledge gap isn’t about AI’s potential to drive growth or streamline operations; it’s about how to implement it securely. CISOs recognize the risks in AI’s expansive attack surface.

Without strong assurances that company data, access controls, and proprietary models can be safeguarded, they hesitate to roll out AI at scale. This is likely the biggest reason why AI apps at the enterprise level are coming out only at a trickle.

The rush to develop AI capabilities has created a multi-industry bottleneck in adoption, not because companies lack interest, but because security hasn’t kept pace. While technical innovation in AI has accelerated rapidly, protections tailored to AI systems have lagged behind.

This imbalance leaves companies exposed and without confidence to deploy at scale. Making matters worse, the talent pool for AI-specific cybersecurity remains shallow, delaying the hands-on support organizations need to integrate safeguards and move from adoption intent to execution.

This growing adoption gap isn’t just about tools or staffing—it’s compounded by a broader mix of complicating factors across the landscape. Some 82% of companies in the US now have a BYOD policy, which complicates cybersecurity even absent AI.

Elon Musk’s Department of Government Efficiency (DOGE) has fired hundreds of employees at the U.S. government’s cybersecurity agency CISA, which worked directly with enterprises on cybersecurity measures. This dearth of trust only tightens this bottleneck.

Meanwhile, we’re seeing AI platforms like DeepSeek become capable of creating the basic structure for malware. Human CISOs, in other words, are trying to create AI cybersecurity capable of facing AI attackers, and they’re not sure how. So rather than risk it, they don’t do it at all.

The consequences are now becoming evident, and dealing a critical blow to adoption. It just about goes without saying: AI won’t reach its full potential absent widespread adoption. AI is not going to fizzle out like a mere trend, but AI security is lagging and inadequate and it’s clearly hampering development.

AI security is shifting from speculative to strategic. This is a market brimming with potential. Enterprises are grappling with the severity and scale of AI-specific threats, and the demand those challenges created are attracting wider investor interest. Organizations have no choice but to secure AI to fully harness its capabilities. Those that aren’t hesitating are actively seeking solutions through dedicated vendors or by building internal expertise.

This has created a lot of noise. A lot of vendors claim to be doing AI red teaming, while really just offering basic penetration testing in a shiny package. They may expose some vulnerabilities and generate initial shock value, but they fall short of providing the continuous and contextual insight needed to secure AI in real-world conditions.

If I were trying to bring AI into production in an enterprise environment, a simple pen test wouldn’t cut it. I would require robust, repeatable testing that accounts for the nuances of runtime behavior, emergent attack vectors, and model drift. Unfortunately, in the rush to move AI forward, many cybersecurity offerings are relying on this “good enough” pen testing, and that’s not good enough for smart organizations.

The reality is that AI security requires a fundamentally different approach – this is a new class of software. Traditional models of vulnerability testing fail to capture how AI systems adapt, learn, and interact with their environments.

Worse still, many model developers are constrained by their own knowledge silos. They can only guard against threats they’ve seen before. Without continuous external evaluation, blind spots will remain.

As AI becomes embedded across sectors and systems, cybersecurity needs to provide actually suitable solutions. That means moving beyond one-time audits or compliance checkboxes. It means adopting dynamic, adaptive security frameworks that evolve alongside the models they’re meant to protect. Without this, the AI industry will stagnate or risk serious security breaches.

We list the best encrypted messaging app for Android.

This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

- Renewed for season 5 in 2024
- Filming wrapped in early July 2025
- Releases on September 9, 2025
- First official trailer unveiled on August 12, 2025
- Show’s main cast to return
- Renée Zellweger, Keegan-Michael Key, Christoph Waltz and more joining the cast
- Plot details scarce, bar speculation on season 4’s finale
- Co-creator John Hoffman hopes for more seasons

Only Murders in the Building can't seem to catch a break. In the Arconia, the murder-solving, podcast-making trio appeared to finally show some resolve in the season 4 finale, but the show, once again, got quickly turned on its head.

And so, the iconic trio of Selena Gomez, Steve Martin, and Martin Short must return to solve yet another mystery in one of the best Hulu shows.

In Only Murders in the Building season 4, the trio's famed podcast was catapulted into a movie production, then overshadowed by a flurry of murders, including the death of Charles' beloved stunt double, Sazz Pataki.

Unfortunately, as has been the case for the past four seasons, murder seems to follow wherever they go – and it did so all the way into the finale.

So, with Only Murders in the Building season 5 almost on screens, here's everything you need to know, including cast, plot, and when it could be released on Hulu (US) and Disney+ (internationally).

Full spoilers follow for Only Murders in the Building seasons 1 to 4.

Season 5 of #OnlyMurdersInTheBuilding premieres September 9 on @hulu and with #HuluOnDisneyPlus. Drop a ⛲️ if you can't wait! pic.twitter.com/3tjFcTwSakJuly 23, 2025

It's official! Only Murders in the Building season 5 is returning to screens on September 9, 2025. We'll get the first three episodes on its debut date, with the rest of the series released on a weekly basis. This only falls short of our original prediction of an August drop by a few weeks, but hey, what's a bit of extra time when you know brilliance is on the way?

We've also got a first-look image at the new season, with our main trio re-enacting the 'hear no evil, see no evil, speak no evil' saying on the floor of what looks like wine cellar. Why are they there? With these three, that's anybody's guess.

Filming for season 5 started in March and was confirmed to have wrapped in early July. Given there's only a few weeks between filming and new episodes being released, we really can't complain... that's a darn quick turnaround.

Huzzah! The full season 5 trailer has finally arrived.

It gives us a glimpse of Lester's funeral, the whole host of new cameos set to feature throughout season 5 and the many returning faces that are going to play integral parts in the story.

Plus, we also get a sneak peek of Charles' 'funeral finger' intent on finding the next culprit. It might be all about Renée Zellweger, but Dianne Wiest's role looks like she's hiding something.

It wouldn’t be Only Murders in the Building without the charismatic and endearing trio of Selena Gomez, Martin Short, and Steve Martin, who will all be returning. We also have a confirmed guest star for season 5 - Téa Leoni - who appeared in the season 4 finale, which we'll discuss more in the plot speculation below. Plus, an abundance of guest stars are also joining the show.

Here's the confirmed Only Murders in the Building season 5 cast so far:

• Steve Martin as Charles-Haden Savage
• Selena Gomez as Mabel Mora
• Martin Short as Oliver Putnam
• Meryl Streep as Loretta Durkin-Putnam
• Téa Leoni as Sofia Caccimelio
• Da'Vine Joy Randolph as Detective Donna Williams
• Jackie Hoffman as Uma Heller
• Ryan Boussard as Will Putnam
• Michael Cyril Creighton as Howard Morris
• Keegan Michael-Key as TBC
• Renée Zellweger as TBC
• Christoph Waltz as TBC
• Logan Lerman as TBC
• Jermaine Fowler as TBC
• Beanie Feldstein as TBC

Despite already having a star-studded main cast to lead the show, Only Murders in the Building has proven that it will always bring in an incredible list of guest stars - from Tina Fey in season 1 to Meryl Streep in season 3. Although Streep has since become a recurring cast member. Not forgetting, there’s the Charles, Mabel, and Oliver of the season 4 movie adaptation, played by Eugene Levy, Eva Longoria, and Zach Galifinakis.

And season 5 is no different. In a flurry of cast announcements, Deadline exclusively revealed that Keegan Michael-Key, Renée Zellweger, Logan Lerman, Jermaine Fowler and Beanie Feldstein are all joining the Only Murders in the Building season 5 cast.

Variety also revealed the addition of Christoph Waltz in a "recurring role". Though details of their characters are being kept firmly under wraps, which is no surprise in a show as mysterious as this one.

Major spoilers follow for Only Murders in the Building season 4.

Here's the official season 5 synopsis: "After their beloved doorman, Lester, dies under suspicious circumstances, Charles, Oliver, and Mabel refuse to believe it was an accident. Their investigation plunges them into the shadowy corners of New York and beyond – where the trio uncovers a dangerous web of secrets connecting powerful billionaires, old-school mobsters, and the mysterious residents of the Arconia. The trio discovers a deeper divide between their storied city they thought they knew and the new New York evolving around them – one where the old mob fights to hold on as newer, even more dangerous players emerge."

While the trio successfully solved yet another murder by the end of season 4 - this time of Charles’ stunt double, Sazz Pataki - it felt once again like they’d finally be free to relax. But, it wouldn’t be a show without another murder.

As the trio enjoyed the fact that Oliver’s wedding day to Loretta (Meryl Streep) had gone unspoiled, they’re quickly brought back to reality as they find Lester, The Arconia’s doorman and beloved recurring star of the show, dead in the fountain. As has been the case with previous seasons, this cliffhanger ending sets up the tale for the next investigation - and season 5.

But, that’s not the only investigation hinted at as season 4 wrapped up. A mysterious woman, who introduces herself as Sofia (Téa Leoni), asks Charles and Mabel to find her husband, Nicky ‘The Neck’ Caccimelio. Now, we heard this name on a news report in episode nine saying Nicky, the dry-cleaning King of Brooklyn with links to the Caputo crime family, had disappeared. A report that Mabel reacts to. Sofia says she’ll pay them well to help her, to which they explain they only investigate murders in the building. Her reply, his disappearance has everything to do with the building. Though they turn her away, she leaves her card and the hint that her story will very much be intertwined in season 5.

A hint that has since been confirmed by co-creator John Hoffman to Deadline: "I think she's the great tease at the end of the finale and a little bit of an intriguing bump forward." Adding: "But beyond that, it's a world opened up potentially that we haven't talked about too much yet in New York, so she holds a lot of intrigue."

There’s even more to discuss though - murders aside. The finale saw Oliver and Loretta wed, though Loretta’s TV show has relocated to New Zealand, and so did she. Leaving Oliver behind at The Arconia with his friends, they agree that they’ll make their unconventional relationship work, even with distance. Given this, we’d assume this won’t be the last we see of the newlywed, Loretta Durkin-Putnam.

Then, there’s the shocking return of Jan Bellows (Amy Ryan), who despite being imprisoned in season 1, saves the trio by shooting and killing Marshall P. Pope, aka Rex Bailey, aka Sazz’s killer. Though she appeared earlier in the season, Charles was also hallucinating Sazz, so it wasn’t clear whether he had imagined Jan, too. Fortunately, she wasn’t a pigment of his imagination and consequently killed to avenge Sazz, her friend after a visit in prison in season 2, and save Charles (and Mabel and Oliver). But, as the police took her away in handcuffs, Jan said: “It’s not goodbye, Charles. It never is with us. We’re endgame.” To this, we’d predict, that we haven’t said farewell to Jan after all.

Only Murders in the Building season 4 also concluded with the movie still filming. So, a return of Eva Longoria, Zach Galifinakis, and Eugene Levy could well be on the cards for season 5. Plus, with another murder in the building, we’d expect the return of the usual stalwart Arconia residents (who haven’t been murdered, yet) returning to aid in whatever way they can, especially now it involves a man who has helped them all before.

While we also met some of the unusual residents of the West Tower in season 4, it’s not clear whether they’ll be returning to help with Lester’s death, or return to their lesser-known side of The Arconia.

And when it comes to the recurring role of Paul Rudd - first as actor Ben Glenroy in seasons 2 and 3, and then as Ben’s stunt double, Glen Stubbins in season 4, co-creator John Hoffman told TVLine: “ The fact that he likes the show as much as he does, and keeps at it with us, moves me to the point of making terrible choices. Dramatically, I can’t take anything off the table for him or for Jane Lynch. Or anyone else, frankly.”

Back in season 3, showrunner John Hoffman told Screen Rant he was very eager to return for many seasons: “This is one of those shows where everyone involved in it is so happy doing it – and I know I speak for the trio and everyone else.”

Continuing: “I hope it gives it a good long life.” While three seasons have now turned into five, we can only hope for more.

Hoffman certainly has ambition for more, if Hulu wants it. During an interview with Variety, he said: “Once you get over the hump of how many murders can happen in one building, you’re really stepping back and looking ultimately at the true original concept, which is three lonely people in New York City brought together by a common interest in true crime.

"Hopefully, we’ve tethered out our stories and hit reflections of things that we all recognize about life and death — and being that close to it and examining and investigating and following that, and then reflecting back. All of that feels very fertile always, so I’ll go as long as they’ll have us.”

There’s no official news past season 5 though. With a swift renewal in the midst of season 4, if we’re going to hear more, we imagine it’ll be after season 5 has got underway.

For more Hulu and Disney+ TV-based coverage, read our guides on Shōgun season 2, Daredevil: Born Again season 2, and X-Men 97 season 2.

Could AI be the answer to the UK’s productivity problem? More than half (58%) of organizations think so, with many experiencing a diverse range of AI-related benefits including increased innovation, improved products or services and enhanced customer relationships.

You don’t need me to tell you this – chances are you’re one of the 7 million UK workers already using AI in the workplace. Whether you’re saving a few minutes on emails, summarizing a document, pulling insights from research, or creating workflow automations.

Yet while AI is a real source of opportunities for companies and their employees, pressure for organizations to adopt it quickly can inadvertently give rise to increased cybersecurity risks. Meet shadow AI.

Feeling the heat to do more with less, employees are looking to GenAI to save time and make their lives easier – with 57% of office workers globally resorting to third-party AI apps in the public domain. But when employees start bringing their own tech to work without IT approval, shadow AI rears its head.

Today this is a very real problem, with as many as 55% of global workers using unapproved AI tools while working, and 40% using those that are outright banned by their organization.

Further, internet searches for the term “shadow AI” are on the rise – leaping by 90% year-on-year. This shows the extent to which employees are “experimenting” with GenAI – and just how precariously an organization's security and reputation hangs in the balance.

If UK organizations are going to stop this rapidly evolving threat in its tracks, they need to wake up to the threat of shadow AI – and fast. This is because the use of LLMs within organizations is gaining speed, with over 562 companies around the world engaging with them last year.

Despite this rapid rise in use cases, 65% of organizations still aren’t comprehending the implications of GenAI. But each unsanctioned tool leads to significant vulnerabilities that include (but are not limited to):

1. Data leakage

When used without proper security protocols, shadow AI tools raise serious concerns about the vulnerability of sensitive content, e.g. data leakage through the learning of information in LLMs.

2. Regulatory and compliance risk

Transparency around AI usage is central to ensuring not just the integrity of business content, but users’ personal data and safety. However, many organizations lack expertise or knowledge around the risks associated with AI and/or are deterred by cost constraints.

3. Poor tool management

A serious challenge for cybersecurity teams is maintaining a tech stack when they don’t know who is using what – especially in a complex IT ecosystem. Instead, comprehensive oversight is needed and security teams must have visibility and control over all AI tools.

4. Bias perpetuation

AI is only as effective as the data it learns from and flawed data can lead to AI perpetuating harmful biases in its responses. When employees use shadow AI companies are at risk of this – as they have no oversight of the data such tools draw upon.

The fight against shadow AI begins with awareness. Organizations must acknowledge that these risks are very real before they can pave the way for better ways of working and higher performance – in a secure and sanctioned way.

To realize the potential of AI, decision makers must create a controlled, balanced environment that puts them in a secure position – one where they can begin to trial new processes with AI organically and safely. Crucially though, this approach should exist within a zero-trust architecture – one which prioritizes essential security factors.

AI shouldn’t be treated as a bolt-on. Securely leveraging it requires a collaborative environment that prioritizes safety. This ensures AI solutions enhance – not hinder – content production. Adaptive automation helps organizations adjust to changing conditions, inputs, and policies, simplifying deployment and integration.

Any security experience must also be a seamless one, and individuals across the business should be free to apply and maintain consistent policies without interruption to their day-to-day. A modern security operations center looks like automated threat detection and response that not only spot threats but handles them directly, making for a consistent, efficient process.

Robust access controls are also key to a zero-trust framework, preventing unauthorized queries and protecting sensitive information. While these governance policies have to be precise, they must also be flexible to keep pace with AI adoption, regulatory demands, and evolving best practices.

AI could very well be the answer to the UK’s productivity problem. But for this to happen, organizations need to ensure there isn't a gap in their AI strategy where employees feel limited by the AI tools available to them. This inadvertently leads to shadow AI risks.

Powering productivity needs to be secure, and organizations need two things to ensure this happens – a strong and comprehensive AI strategy and a single content management platform.

With secure and compliant AI tools, employees are able to deploy the latest innovations in their content workflows without putting their organization at risk. This means that innovation doesn’t come at the expense of security – a balance that, in a new era of heightened risk and expectation, is key.

We list the best IT management tools.

This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

• Workday study finds not many workers are happy being managed by AI, or seeing AI operate independently
• Nine in 10 believe AI agents could help boost their productivity at work
• Nearly half are worried about AI's effect on their critical thinking

The majority of workers say they are comfortable working with AI agents, however far fewer (30%) are comfortable being managed by them, new research has found.

The findings from Workday comes as four in five (82%) organizations expand their use of AI agents, with workers now demanding clearer boundaries and reassurance about their roles.

On the whole, the study found workers are generally happier when they're in control of artificial intelligence, with 75% fine with AI tools recommending skills or working alongside them compared with 24% who are comfortable with it operating in the background, without human knowledge.

How much a worker trusts AI comes down to how much they use it – 95% of experienced users trust the tech, with only 36% of AI 'explorers' trusting responsible use.

"Building trust means being intentional in how AI is used and keeping people at the center of every decision," Workday AI VP Kathy Pham explained.

However, despite apprehension around advanced agentic AI taking control in the background, workers still acknowledge how it could help them.

Nine in 10 employees believe AI agents will help them get more done. To that degree, nearly half (48%) worry that the added productivity could come with increased pressure at work, potentially by increased workloads, as well as a decline in critical thinking (48%).

Rather than seeing AI as a human replacement and full colleague, most of the study's participants prefer to see AI as a teammate that can boost their own productivity. Sensitive areas like hiring, finance and legal matters are where it's perceived less favorably, underscoring the need for human oversight.

"We’re entering a new era of work where AI can be an incredible partner, and a complement to human judgement, leadership, and empathy," Pham added,

Still, despite early concerns, workers are less likely to worry about AI taking their jobs (12%), with most believing AI could actually help address ongoing talent shortages (76%).

• These are the best AI writers around
• Check out our roundup of the best online collaboration tools
• "You may lose your job to an engineer who uses AI" - here's why so many US workers pretend to use AI on the job

• The iPhone 17 Air might have an A19 Pro chipset
• But it could have one less GPU core than the iPhone 17 Pro
• It might also have a worse screen and battery

The rumored iPhone 17 Air is an intriguing handset, as it could be a big hit for Apple – or a colossal failure, depending on how well Apple balances its build with its specs, and on how much people take to a super-slim iPhone. The latest leak though suggests Apple might not have got the balance right for me.

According to Fixed Focus Digital – a leaker with a reasonable track record – posting on Weibo (via GSMArena), the iPhone 17 Air will have an A19 Pro chipset, just like the iPhone 17 Pro and the iPhone 17 Pro Max. Except, it won’t quite be the same here, as this source claims that the Air’s version will have five GPU cores, while the version used by the Pro phones will have six.

It remains to be seen how much difference that will make, but it would mean the iPhone 17 Air is less powerful than the iPhone 17 Pro and Pro Max – though still probably more powerful than the base iPhone 17, which will reportedly have a non-Pro version of the A19.

But this isn’t the Air’s only rumored compromise, as the same source also says that it will have a worse screen and battery than the iPhone 17 Pro.

They don’t get specific here as to the ways in which they’re worse, but presumably this means a lower battery capacity. As for the screen, that’s probably a reference to a previous claim they made that the base iPhone 17 and iPhone 17 Air wouldn’t have a variable refresh rate, and in turn therefore probably wouldn’t have an always-on display – though they will at least apparently have 120Hz screens.

So that’s quite a lot of compromises, and – coupled with the iPhone 17 Air probably just having one rear camera – this would almost certainly be too much of a compromise for me. Really, it seems only those who value aesthetics over everything else would choose to purchase the Air.

Yet there might be a lot of buyers like that, with Fixed Focus Digital predicting that the iPhone 17 Air will be a hit. So it will be interesting to see how well it actually does. We should find out in September, as that’s when the entire iPhone 17 series is expected to launch.

• 'This looks hideous': the iPhone 17 Pro has been shown off in a new orange shade that you’re going to either love or hate
• New iPhone 17 rumors tease pricing and colors – and there's good news and bad news
• The foldable iPhone could have much smaller screens than the Samsung Galaxy Z Fold 7