Sead Fadilpašić

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Articles by: Sead Fadilpašić

PDF

Adobe Reader users beware — experts flag months-old security flaw using booby-trapped PDFs to scope out victims

By Sead Fadilpašić published

Adobe Reader contains a zero-day that has been abused for some time, experts warn.

WordPress on a laptop

Top WordPress Slider plugin hijacked to spread malware — here's what to look out for

By Sead Fadilpašić published

A tainted version was pushed as an update to more than 800,000 active websites.

Malware attack virus alert , malicious software infection , cyber security awareness training to protect business

Breach exposes sensitive LAPD files stored in city attorney system

By Sead Fadilpašić published

337,000 LAPD files stolen, including personnel and internal affairs data.

The Dock in macOS.

Mac users beware — experts say this attack 'stood out immediately' by making a major change to try spread malware

By Sead Fadilpašić published

ClickFix on Macs is evolving yet again and is no longer abusing Terminal.

Someone typing at a keyboard, with an ecommerce shopping cart symbol floating in the air.

Now that's different - hackers use miniature SVG images to try and hide credit card stealer

By Sead Fadilpašić published

Card skimmers were found in 1x1 pixel SVG images, apparently deployed through PolyShell.

Man looking shocked whilst sitting in front of a laptop.

French email provider accidentally leaked 40 million records — L’Oreal, Renault, French government data exposed

By Sead Fadilpašić published

Millions of email addresses exposed through an open Elasticsearch cluster.

A person in a medical practice typing on a laptop.

NHS Scotland domains reportedly found serving adult content and illegal sport streams

By Sead Fadilpašić published

A legacy website was compromised and used to promote inappropriate content, but has since been defaced.

Representational image of data security

Third-party integration tool Anodot data breach hits Snowflake customers

By Sead Fadilpašić last updated

A supply chain attack has, once again, affected at least a dozen Snowflake customers.

Angry emoji

'This creates a layered form of obfuscation': New report says criminals are using emojis to avoid detection

By Sead Fadilpašić published

Security analysts aren't scanning the dark web for emojis, allowing criminals to share messages wiithout being spotted.

A padlock icon next to a person working on a laptop.

Top open source AI platform Flowise hit by maximum-level security issue

By Sead Fadilpašić published

A 10/10 Flowise bug was patched, but is now being abused in the wild.

Electrical pylons and high voltage power lines are behind a barbed wire fence. critical infrastructure

US agencies warn Iranian hackers are targeting American critical infrastructure — causing 'disruptive effects within the United States'

By Sead Fadilpašić published

Iran war spills into US cyberspace, affecting critical infrastructure organizations.

Digital image of a lock.

'This puts organizations at risk of credential theft, data manipulation and broader compromise': UK government, Microsoft warn Russian hackers are hitting TP-Link home routers to hijack internet traffic

By Sead Fadilpašić published

SOHO endpoints are being used as gateways into corporate environments, where credentials and sensitive data gets harvested.

Malware attack virus alert , malicious software infection , cyber security awareness training to protect business

Microsoft flags China-based hackers using vicious new 'rapid attack' zero-days to launch ransomware at targets across the world

By Sead Fadilpašić published

Microsoft warns the window to patch known flaws is shrinking, while the window to abuse zero-days grows.

Deep Fake image.

'Verify before you act': security expert reveals the simple steps you can take to stay safe from deepfakes

By Sead Fadilpašić published

There are simple steps everyone can take to identify a fake video - and most include pixel hunting.

ransomware avast

I can't think of anything that's off limits to them': FBI slams cybercriminals for attacking schools, hospitals, as crypto fraud soars

By Sead Fadilpašić published

The FBI's new IC3 report dissects the state of ransomware, and discusses attacks on hospitals and critical infrastructure firms.

Fingertip pressing keyboard key with Windows logo on it

'I was not bluffing Microsoft, and I'm doing it again': apparently disgruntled researcher leaks worrying Windows zero-day security flaw

By Sead Fadilpašić published

Researchers confirm the bug works, while Microsoft gives a bland statement.

Ransomware

Goodnight REvil and GandCrab? Police think they've identified two of the biggest cybercrime bosses around

By Sead Fadilpašić published

German police are looking for two Russians who allegedly ran GandCrab and REvil ransomware operations.

A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.

SparkCat malware returns to target Android and iOS users, hiding in innocent apps to try and steal your details

By Sead Fadilpašić published

The malware primarily targets crypto users in Japan, Korea, and China.

linkedin

One of the largest corporate espionage and data breach scandals in digital history': New "BrowserGate" report claims LinkedIn secretly scans user browsers for installed extensions and collects device data

By Sead Fadilpašić published

LinkedIn calls it a smear campaign, but does not deny scanning people's browsers for extensions.

A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system

This devious VENOM phishing campaign targets business executives by name — so watch what you click on

By Sead Fadilpašić published

Researchers found a new phishing kit called VENOM, capable of stealing 2FA codes and access tokens.

The entrance of the Louvre Pyramid, two weeks after a robbery at the Louvre in Paris, France, November 3, 2025.

Top museums hit by apparent cyberattack on Vivaticket — Louvre and other institutions affected

By Sead Fadilpašić published

A hacking group called RansomHouse is claiming responsibility, saying it breached Vivaticket through a French subsidiary.

Avast cybersecurity

Uffizi galleries confirms it was hit by cyberattack — but claims nothing was stolen

By Sead Fadilpašić published

The attackers reached out to the Uffizi director via phone to demand payment.

Claude on mobile phones.

Be careful what you click - hackers use Claude Code leak to push malware

By Sead Fadilpašić published

Fake source code repositories carrying infostealers are popping up on GitHub.

healthcare

Hims and Hers reveal cyberattack — customer support system hacked and personal info stolen, here's what we know

By Sead Fadilpašić published

At least 500 people were affected in breach at Hims and Hers.

KYC

Top money transfer site Duc leaks user passport and driving license data info online

By Sead Fadilpašić published

Hundreds of thousands of KYC files were exposed in attack on Duc.

Other versions of this page are available with specific content for the following regions: