Sead Fadilpašić

Everest is claiming responsibility and says it stole hundreds of gigabytes of files.

A fake LastPass email is telling users they died, and that a relative is taking over their account.

Dozens of countries sign new UN cybercrime treaty, but not everyone is pleased with the result.

It's the second major issue to hit Alaska Airlines after a July 2025 incident which grounded multiple flights.

Microsoft acknowledges the risk, and says it is working on improvements.

Three old WordPress vulnerabilities are being leveraged to establish persistence and steal files.

Microsoft publishes an out-of-band patch after PoC for an RCE flaw emerges.

The critical severity bug is being actively exploited in the wild, possibly by ransomware actors, CISA says.

Lazarus is after drone know-how and has infiltrated three firms.

Toys "R" Us is urging customers to be wary of incoming phishing attacks.

An update made the trust between Windows and Entra ID "disappear" but HP is working on it.

Gift cards are ideal for hackers since they can easily be redeemed or sold without sharing personally identifiable data.

Generative AI is being used to create flawless phishing lures - and it's increasing the popularity of the technique.

Hackers are still trying to infect victims via Word macros, despite the technique dying years ago.

Adobe patches a deserialization vulnerability in Magento and Commerce.

TP-Link patches four important bugs, including two critical severity ones.

An “HTTP request smuggling bug” was found in ASP.NET Core that could allow different security bypasses.

ClickFix has made its way to TikTok - so be careful whose advice you're taking.

A WatchGuard VPN patch is already available - so make sure you apply it as soon as possible.