Sead Fadilpašić

A bug named SessionReaper allows for full account takeover.

Researchers spotted a unique piece of malware called RatOn, combining previously unseen features.

A major cryptojacking campaign, possibly turning into a botnet, was seen in the wild.

The police are looking for a Ukrainian national allegedly responsible for millions in ransomware damages.

Dozens of domains used by Salt Typhoon and others, as part of C2 infrastructure were discovered.

An advanced, highly convincing, phishing campaign, was spotted spoofing hospitality-centric platforms.

The "biggest supply chain attack" in the history of npm took place recently, affecting almost two dozen packages.

Media streaming giant warns of a cyberattack affecting some of its users.

Hundreds of accounts and thousands of secrets stolen in a supply chain attack.

SVG files used to trick people into downloading malicious DLLs.

A dubious infostealer can grab webcam snapshots if an XXX site is opened in the browser.

Malicious or negligent - it makes no difference, businesses suffer nonetheless.

The company suffered a third-party attack, but stressed that passwords - and funds - are safe.

A critical SAP flaw is being used in "limited" attacks against unknown entities.

Hackers break into a third-party file transfer tool used by Chess.com.

Chinese state-sponsored threat actors spotted targeting old TP-Link routers with botnet-building malware.

Sitecore flaw was being used to deploy reconnaissance malware as well as numerous legitimate tools.

Chinese hackers seen deploying new malware to boost Google rankings for shady sites.

An attack disrupted Bridgestone operations in two countries.

In some instances, the archive contained "full-spectrum" data, so be on your guard.

URL encoding, fake CAPTCHAs, and more have been added to the world's most dangerous phishing kit.

Hackers up the ante with vulnerability abuse automation through a legitimate red teaming tool.

API tokens and customer data were stolen in Cloudflare attack.