Sead Fadilpašić

Many hotels have sensitive customer data stolen, including passport and ID card scans.

Editing a website can be done in real-time by people with no technical knowledge.

As AI use grows, most of the old red flags no longer apply, security experts warn.

Researchers find a way to work around FIDO-based authentication to harvest login credentials and session cookies.

A new malware framework has been seen advertised across the web - both through ads and weaponized sites.

Someone is actively trying to brute-force VPNs which, GreyNoise says, is a signal for an existing zero-day.

Zoom urges users to apply the patch as soon as possible.

Devs are keeping the malicious packages, claiming they're undated and shouldn't be used anyway.

Data stolen in the recent Allianz Life breach has now made it into the open internet - here is what to do.

Attack against Manpower in late 2024 was most likely conducted by a known threat actor.

The August 2025 Patch Tuesday release fixes a broad mix of vulnerabilities across different services.

CurlyCOMrades are targeting Moldova and Georgia governments with MucorAgent.

A fully white-labeled AI Website Builder solution is coming to WordPress in the form of a plugin.

Improper authentication bug found in Microsoft Exchange hybrid environments that could grant threat actors lateral movement across the network.

A hacker with a conscience targeted Kimsuky and leaked tools, logs, and more.

Retrieving crypto from ransomware gangs is extremely difficult, but the US government managed to get some of it back.

Names, debit card data, and SSNs stolen from Connex Credit Union, which is being investigated.

Hackers devised new tools to terminate your antivirus solutions, leaving users at risk.

Many healthcare devices are not properly configured or managed, leaking sensitive patient files on the internet.

What if your webcam turns on you and starts downloading malware?

Older versions of WinRAR were carrying a major vulnerability which was being exploited in the wild.