Sead Fadilpašić

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Articles by: Sead Fadilpašić

Android reboot interface
New Android malware can deploy AI to automate device control — and it can even bring itself back from the dead

By Sead Fadilpašić Published

AI can now serve as the eyes and the hands of a piece of malware and even reinstall components if they're removed.

A conceptual image featuring Donald Trump and China President Xi Jinping on a screen, with undulating stocks and a dollar bill in the background.
China's Salt Typhoon spotted probing Latin American government with newly developed SparroWocky backdoor

By Sead Fadilpašić Published

The group has been focused on Latin America for almost a year now.

Representational image of a cybercriminal
FBI confirms two Texas-bound oil tankers hit by hackers who disabled coms and put the engines into overdrive — and Iran is possibly to blame

By Sead Fadilpašić Published

The FBI had to board at least one of the vessels to investigate the incident.

A 3d rendering of "sweet returns" or "liquid gold," the combination of the honey (the lure) and the coins (the asset) is a classic visual metaphor for a honeypot scam.
CISA urges business to deploy decoys, lures, and honeypots to catch hackers in the act

By Sead Fadilpašić Published

ZTNA is great, but it can be even better with a little honeypot, CISA advises.

Phishing
Keep seeing strange meetings and events in your calendar? It might be because calendar-based phishing has jumped 33,000% since May — and they work even if the email is sent to spam

By Sead Fadilpašić Published

ICS phishing has finally "hit the mainstream" as it keeps rising in popularity month over month.

DDoS inscribed on a digital background made up of numbers
NightmareStresser group responsible for thousands of DDOS attacks has domains seized in major operation

By Sead Fadilpašić Published

Two domains seized by the DoJ but the infrastructure remains intact.

Image depicting a hand on a scanner
Gyazo breach exposes 23.62 million user records and 490 million image records — PII and metadata exposed in huge attack

By Sead Fadilpašić Published

PII, image metadata, and possibly personal images, exposed in a large attack on Helpfeel's image-sharing service.

Proactive Cybersecurity Service That Neutralizes Threats Within a Digital Network - Conceptual Illustration
Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up

By Sead Fadilpašić Published

Both Cisco and CISA are warning about in-the-wild abuse.

Scammers pose as airline customer support to help with your complaints and then steal your credit card info

By Sead Fadilpašić Published

Fraudsters are taking advantage of people venting on social media to inflict even more damage.

Hologram of the artificial intelligence robot showing up from binary code
Autonomous AI agent hit Spanish firm with vulnerability scans before accessing files and data

By Sead Fadilpašić Published

Spanish data protection agency disclosed a breach done by an AI agent powered by a well-known LLM.

Binary code with Iran flag, data protection concept - stock photo
Iran snoops on enemies of the state with Chosen Brick malware controlled using messaging apps

By Sead Fadilpašić Published

Chosen Brick can turn on the microphone and exfiltrate WhatsApp and Telegram information.

A pink triangle with a red exclamation mark inside on a blue digital landscape
CenterPoint Energy confirms hackers compromised networks and stole data, and the hackers claim theft of 7.5 million files

By Sead Fadilpašić Published

The company confirmed the hack in a new SEC filing and said the investigation is ongoing.

TP-Link C200
Watch out — TP-Link Tapo Camera vulnerabilities could let hackers spy inside homes, so patch now

By Sead Fadilpašić Published

A firmware update is now available to fix the issues.

WooCommerce
Third-party WooCommerce plugin hits WordPress sites with PHP backdoor abusing recently patched vulnerability

By Sead Fadilpašić Published

Attackers are actively exploiting a recently patched flaw in a plugin used by thousands.

A pink triangle with a red exclamation mark inside on a blue digital landscape
Chrome and Edge browsers hijacked by KREMLIN malware for credential and token session theft

By Sead Fadilpašić Published

The KREMLIN malware has nothing to do with Russia - it is a Brazilian campaign.

Robotic hand interacting with a digital display showing various military equipment, defense systems, drones and cybersecurity elements and data visualization in a dark environment.
'New arena for strategic rivalry': China’s intelligence chief calls for regulations and guardrails on AI to prevent new arms race

By Sead Fadilpašić Published

AI comes with great risks which need to be managed, China's Minister of State Security says

Phishing
Almost 8000 organizations hit by fake voicemail transcript emails in credential phishing attack

By Sead Fadilpašić Published

That voicemail notification in your inbox could be a phishing lure being sent by a cybercriminal.

an ai agent sat at a laptop
RubyGems say OpenAI agents responsible for undisclosed swarm attack against its infrastructure

By Sead Fadilpašić Published

Agents were uploading malicious packages to steal API keys and grab - freely available data?

Twitch logo under a magnifying glass in internet browser
31,000 Twitch users hit by malicious browser extension — OAuth tokens leaked via Russian proxy network

By Sead Fadilpašić Published

The extension has since been updated to remove the OAuth exfil.

Malware attack virus alert , malicious software infection , cyber security awareness training to protect business
CISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately

By Sead Fadilpašić Published

A 10/10 GitLab flaw was added to CISA's KEV, giving government agencies just three days to patch.

Passkeys
Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign

By Sead Fadilpašić Published

Passkeys have all but eliminated password theft, so what now? Criminals have a solution.

An outstretched hand holds a smartphone displaying the Revolut app
Revolut sent identity data, contact details, and documents to hackers posing as a government agency

By Sead Fadilpašić Published

Revolut is now being asked to pay a humongous ransom demand to keep the data private.

Several figures wearing paper bags on their heads with smiley faces drawn on them.
Web fraud enters a new age as complete 'synthetic identities' can now be bought for as little as $200 on dark web marketplaces

By Sead Fadilpašić Published

Your "digital Frankenstein" can pass KYC and you can get it for $200 on Telegram

Hands typing on a tablet with AI superimposed in text in front
Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

By Sead Fadilpašić Published

"WHAT THE HELL IS WRONG WITH THE ANSWERS?" AI cried, in vain as two seemingly identical crocodiles were shown in the CAPTCHA.

Back view of hooded internet criminal hacking laptop in the dark, stealing credit card details
US Treasury wants banks to be better at filing file cyber scam reports after noting nearly $13 billion in losses since 2023

By Sead Fadilpašić Published

Banks need to get better at reporting issues, so the US Treasury has shared a list of red flags and explained how the scams usually go.

Other versions of this page are available with specific content for the following regions: