Sead Fadilpašić

Say hello to the Wix Model Context Protocol (MCP) Server built for both designers and website owners.

Very sensitive PII was taken, including health and payment data from iHeartRadio customers.

Three modules found hosting very destructive malware targeting Linux systems.

A Chinese threat actor is on the hunt for login credentials and system data.

Samsung MagicINFO 9 Server bug is being abused in the wild, with users advised to patch immediately.

Darcula has only been around for a couple of years but has quickly became a major PhaaS threat.

Anonymous is "enforcing the judge's orders" by defacing GlobalX and stealing passenger manifests.

The new integration aims to streamline operations by, among other things, automating repetitive tasks.

Microsoft experts claim default configurations often come with open ports and hardcoded credentials.

Rhysida operators claim they broke into a government portal and stole data, but Peru says otherwise.

Ticket To Cash kept an open database on the internet, and no one knows for how long.

At least 21 Magento extensions breached over the last six years, but laid dormant until today.

Chinese hackers found running a SLAAC attack to deliver tainted software updates.

Researchers found multiple malicious PyPI packages, some several years old, but still a threat.

AI used to help create a very realistic-looking threat.

Hacker claims to have stolen files from the platform, but not files belonging to the US Government.

Some 25 million people are eligible for a replacement SIM card but most will have to wait a bit longer.

Chines and North Korean state-sponsored actors are trying really hard to wiggle their way into SentinelOne and its high-value clients.

Hackers are increasingly looking for exposed Git secrets in Singapore and elsewhere.

Of all the zero-days abused in 2024, the majority were used in state-sponsored attacks by China and North Korea.

Oligo Security found and reported the flaws to Apple who patched them in late March 2025.

A workaround and a patch are already available but many firms have already been breached.

The company lost sensitive data, including Social Security numbers.