Sead Fadilpašić

Researchers discovered a new botnet called Kimwolf, allegedly built by the same brain behind AISURU.

The December 2025 Patch Tuesday update broke a few things - and the fix is not yet done.

Cl0p claimed to have breached LKQ, but the attack was confirmed only recently.

A poisoned Asus utility tool was found floating around the web, granting attackers abilities to "perform unintended actions".

A patch has not yet been released, so Cisco advises rebuilding any affected instances.

The company named its chatbot "Copilot" and promises better productivity for sales, marketing, and customer success departments.

A legitimate PayPal platform is being abused to bypass email protections and send phishing messages.

The attacks were stopped, but they could always return - if users don't strengthen their passwords.

More than a dozen Firefox extensions were secretly stealing money from affiliates and tracking people's behavior.

Several dozen entities were recently targeted with an updated backdoor.

Two new Fortinet flaws are being actively abused in the wild in reconnaissance attacks.

ShinyHunters claims responsibility for the attack, saying they stole almost 100GB of sensitive Pornhub Premium user data.

About a fifth of Soundcloud's user base had email details stolen, but banking and login information was unaffected

For years, the GRU was snooping in critical infrastructure firms by abusing misconfigurations and zero-days, Amazon says.

Malicious Chrome extension has also been stealing AI responses and sharing the data with other companies.

Speculation rises over the identity and motives of unknown hackers.

Photos taken at booths get uploaded on the internet where they can easily be downloaded.

Affected 700Credit customers are being offered free credit monitoring and reporting.

A patch was released to fix the bugs and users were forced to update their PIN codes.

Two bugs in WebKit apparently abused in highly sophisticated attackshave been fixed.

Security researcher finds Home Depot GitHub token left behind by mistake for more than a year.

Companies are being phished for data too, and sometimes compromised police inboxes are abused.

The Ukrainians are suing US tech firms over Russian bombs allegedly carrying their tech.