Sead Fadilpašić

ServiceNow patched the flaws in May 2024, so users should update immediately.

Cybernews found a non-password-protected database containing Collectibles.com user names, addresses, and more.

The Pennsylvania State Education Association suffered a ransomware attack in 2024 which exposed sensitive user data on thousands.

Zero-click zero-day was allegedly being used by multiple nation-states against journalists and other high-profile targets.

DollyWay has been around since 2016, distributing malware, and redirecting people to fake gambling sites.

Virtual disk files allow cybercriminals to bypass security protections.

Bitdefender uncovers a large-scale ad fraud campaign employing hundreds of Android apps.

McAfee is warning of a "cocktail of malware" hiding behind fake DeepSeek apps.

Someone stole sensitive data from California Cryobank, including names, bank accounts, and more.

North Korea, Russia, China, and others are abusing an ancient flaw in .LNK files to attack Windows.

This is the second attack on Orange in less than a month, both done by ransomware actors.

Hackers are building on their salting technique to bypass email protection, track users, and redirect them to phishing pages.

Both bugs were fixed in January 2025, but users should update immediately.

StilachiRAT malware hides easily, allows for remote code execution, and steals data.

More than 12,000 GitHub users were targeted so far.

A "dead simple" attack allows threat actors to take over vulnerable Apache Tomcat servers.

A supply chain attack attempted to expose login credentials from tens of thousands of companies.

Black Basta's leaked chat logs reveal brute-forcing tool called BRUTED, used since 2023.

A researcher was able to crack how Akira encrypts files, and created a brute-force tool.