Sead Fadilpašić

With the API, website developers can build fully-fledged WordPress and WooCommerce sites, fast.

A zero-day in Windows Common Log File System was being used to drop encryptors and backoors.

Police in Poland, The Netherlands, Germany, and the US take down DDoS-for-hire services and arrested alleged admins.

No confirmation if it was a ransomware attack yet, but parts of Masimo infrastructure were shut down to contain the incident.

"Don't do crime, crime is bad," someone tells LockBit as they leak sensitive data.

OttoKit plugin bug allows threat actors to create new admin accounts.

Unprotected beWanted database remains open, with the company yet to respond to inquiries.

Say hello to the Wix Model Context Protocol (MCP) Server built for both designers and website owners.

Very sensitive PII was taken, including health and payment data from iHeartRadio customers.

Three modules found hosting very destructive malware targeting Linux systems.

A Chinese threat actor is on the hunt for login credentials and system data.

Samsung MagicINFO 9 Server bug is being abused in the wild, with users advised to patch immediately.

Darcula has only been around for a couple of years but has quickly became a major PhaaS threat.

Anonymous is "enforcing the judge's orders" by defacing GlobalX and stealing passenger manifests.

The new integration aims to streamline operations by, among other things, automating repetitive tasks.

Microsoft experts claim default configurations often come with open ports and hardcoded credentials.

Rhysida operators claim they broke into a government portal and stole data, but Peru says otherwise.

Ticket To Cash kept an open database on the internet, and no one knows for how long.

At least 21 Magento extensions breached over the last six years, but laid dormant until today.

Chinese hackers found running a SLAAC attack to deliver tainted software updates.

Researchers found multiple malicious PyPI packages, some several years old, but still a threat.