Articles by Sead Fadilpašić

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Articles by: Sead Fadilpašić

Meta reveals over 20,000 Instagram accounts hacked and stolen using AI support bot

By Sead Fadilpašić published 8 June 26

We now know the scale of last week's incident as Meta reports it to the Maine AG.

Oxford cityscape with Radcliffe Camera and All Souls college, UK

Hackers outsmart Oxford Uni career progression platform – student data potentially compromised

By Sead Fadilpašić published 8 June 26

A bug in a third-party system was leveraged to steal emails on a yet undisclosed number of people.

'Fraud won’t be tolerated in this country any longer': FBI releases Most Wanted Fraudsters list to help fight the crime that 'costs Americans tens of billions of dollars every year'

By Sead Fadilpašić published 5 June 26

The FBI is currently looking for eight major fraudsters whose whereabouts have been unknown for years.

2 Comments

A hooded figure in front of a laptop. Digital symbols obscure his face and appear to be pouring out of his head

2.6 million DentaQuest accounts exposed by data breach – ShinyHunters claim 234GB of data stolen

By Sead Fadilpašić published 5 June 26

DentaQuest confirmed suffering a data breach, while ShinyHunters claims negotiations broke down.

Hands holding a credit card and mobile phone

Hackers abused Stripe and Google Tag Manager to launch a credit card theft campaign and host stolen payment details

By Sead Fadilpašić published 5 June 26

Google Tag Manager is also abused in this campaign.

A detailed view of the FIFA World Cup Trophy during the VIP Welcome Reception ahead of the FIFA World Cup 2026 Official Draw at John F. Kennedy Center for the Performing Arts on December 04, 2025

FIFA World Cup 2026 hype kicks off fraud, fake apps, and ransomware targeting fans and businesses

By Sead Fadilpašić published 5 June 26

Hackers have been preparing longer than the footballers and the scam infrastructure is now up and running.

Russian hackers attack Europe for the Motherland in crypto fueled Great Patriotic Cyber War

By Sead Fadilpašić published 5 June 26

NoName057(16) launched "Patriotic Online Games", calling all hackers to participate and get paid in crypto.

Red padlock open on electric circuits network dark red background

OpenAI’s Codex helps discover HTTP/2 Bomb DoS attack that can nuke over 30GB of RAM within seconds, knocking web servers offline before they can react

By Sead Fadilpašić published 4 June 26

A new attack technique affects HTTP/2 configurations of major web servers, but some have released patches already.

Industrial interior of water pump, valves, pressure gauges, motors inside engine room. Valve and pumps in an industrial room. Urban modern powerful pipelines and pumps, automatic control systems

NSA warns that cybercriminals are targeting this one critical component that the energy, chemical, food, agriculture, and transportation sectors rely on - here's what we know

By Sead Fadilpašić published 4 June 26

ATG owners are urged to tighten up on security and keep track of potential attacks.

A robot hand touching a locked digital shield blocking a human from accessing data

Hackers could use poisoned WhatsApp and Slack notifications to take over your Google Gemini – and make it work on their behalf

By Sead Fadilpašić published 4 June 26

Prompt injection works on Android notifications, as well, and could have been used for a myriad of things.

Intego Mac Security X9 review

By Sead Fadilpašić last updated 4 June 26

A fully loaded Mac security solution with some useful extras

A person holding a phone looking at a scam text with warning signs around

Meta, Starlink and Microsoft team up with the FBI to delete over 1.4 million accounts and seize millions in cryptocurrency related to huge scam networks targeting Americans

By Sead Fadilpašić published 4 June 26

The FBI arrested 63 people in connection to the scam network, while Microsoft disabled 20,000 accounts.

Hands on a laptop with overlaid logos representing network security

Huge hacking campaign uses spoofed Ghidra, dnSpy, and SpiderFoot security tools to harvest ad revenue and serve malware

By Sead Fadilpašić published 4 June 26

More than 100 spoofed websites were redirecting users and offering infostealers.

Microsoft is ditching password-based authentication tomorrow – Edge browser will switch to Windows Hello access

By Sead Fadilpašić published 3 June 26

Edge's password manager is getting an upgrade as it ditches decades-old solutions.

The letters AI in a box in the middle of a vast digital room divided by beams of line

'You can no longer do things at human scale': Cisco releases AI agent botnet that works on behalf of your business

By Sead Fadilpašić published 3 June 26

Cyberspace has become an AI battlefield, and Cisco wants in on the action.

Weedhack malware campaign infects 116,000 mod-hungry Minecraft players systems through SEO poisoning and YouTube

By Sead Fadilpašić published 3 June 26

Fake mods and clients are being advertised on YouTube and used to deploy backdoors and infostealers.

Steam Community Profiles abused as C2 network in new WordPress malware infection campaign

By Sead Fadilpašić published 3 June 26

A new cheeky malware campaign abuses the comment section as a roadsign to malware

New Trump executive order requests AI companies 'voluntarily' allow the White House to test the "advanced cyber capabilities of AI models”

By Sead Fadilpašić published 3 June 26

AI companies seem to be on board with the idea, with some calling it "an important step forward".

Over 5,000 malicious domains targeting 2026 US Midterm elections spotted going live – and they could be used for fraud, phishing, or worse

By Sead Fadilpašić published 2 June 26

Malicious actors are not targeting vote counters, but rather the voters themselves.

Paper width word VPN and hands on laptop keyboard

Rapid7 observes new Palo Alto VPN flaw exploited in the wild to bypass GlobalProtect authentication

By Sead Fadilpašić published 2 June 26

A flaw fixed last month is now being used in real-life attacks, and security researchers are urging users to patch.

Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing

By Sead Fadilpašić published 2 June 26

Security researchers spotted a new campaign using the same methods as TeamPCP.

A hand about to touch a phone. Superimposed on top of it is a pink triangle with exclamation mark inside it. Behind it is a computer display with code on it

Ransomware groups grow revenue by almost 40% in Q1 2026

By Sead Fadilpašić published 2 June 26

Initial Access Brokers are removing a major pain point helping ransomware operators steal more.

A pink triangle with a red exclamation mark inside on a blue digital landscape

Thousands of compromised websites abused by DriveSurge in active ClickFix and FakeUpdates campaigns

By Sead Fadilpašić published 2 June 26

SilentPush is warning about an Intial Access Broker campaign called DriveSurge that uses thousands of websites to deploy a backdoor.

OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens

By Sead Fadilpašić published 1 June 26

A tool started benign and turned sour after a little while, stealing tokens and granting persistent access.

How to scrape real estate listings efficiently

By Sead Fadilpašić published 1 June 26

Sead Fadilpašić

Useful links