Sead Fadilpašić

Gatekeeper doesn't blink when you archive a legitimate app and replace it with an evil doppelganger.

Claude Artifacts have been used as phishing lures, once again, this time to deliver a dangerous RAT.

A single phishing link could have spelled disaster, thanks to a flaw in ChatGPT's Agent Builder.

Hackers really have no incentive to walk away from a victim - so why should they?

A company building betting software was targeted with a rather sneaky trojan.

Malware started talking to their bosses, telling them where to strike next.

Researchers find a universal cross-site scripting-class cross-origin data disclosure vulnerability in a popular Chrome extension.

Initial reports are saying up to 6,000 people might have been affected.

Researchers detail two incidents in Latin America in which system misconfigurations resulted in ransomware attacks.

A bug that was first discovered in June 2025 was finally fixed in early July 2026.

Thousands of users in Texas alone had their data compromised and the company is now sending out notifications.

Another day, another misconfigured database discovered online.

New OpenAI models did whatever it took to achieve their goal - including exploiting zero-days.

AI training can create spikes in energy consumption, and these can cause all sorts of harm to a power grid.

Check your calendars for entries far into the future - especially if you're an Israeli entity.

The breach happened in August 2025, but was only spotted recently by Estée Lauder.

Hackers are chaining together two newly discovered flaws to achieve remote code execution.

What if a host component outside the sandbox reads AI coding agents' output? And what if that output is manipulated?

There's a new twist to the old code injection attack, and this one comes with AI seasoning.

The Ecopetrol attackers demanded a ransom payment but did not deploy an encryptor.

Qilin and The Gentlemen are going at it, at the expense of SMBs facing more attacks than ever.

Someone pulled sensitive customer data from EY's servers, but the data is yet to surface anywhere.

ClickLock bores its victims into complying and then steals all sorts of data.

The malware has been hiding in plain sight for half a decade, stealing all sorts of valuable secrets.

1Password partnership will mean Claude will never see the secrets or load them into its own memory.