Sead Fadilpašić

A maximum-severity flaw was just patched, and users are urged to apply the fix immediately.

Merom Harpaz, Andrea Nicola Constantino Hermes Gambazzi, and Sara Aleksandra Fayssal Hamou are no longer under US sanctions.

The ESA is investigating the extent of the breach, while hackers share stolen files on the dark web.

Ryan Clifford Goldberg and Kevin Tyler Martin could end up in prison for years after extorting one, and trying to extort four more companies.

Victims will get Coupang vouchers of roughly $35 each.

A Korean airline suffered a supply-chain attack through a catering company.

Chinese attackers are allegedly spying on their neighbors with sophisticated backdoors.

Russia-linked actors are targeting tax firms in the US, stealing highly sensitive data

A proof-of-concept is now available on the internet, and around 87,000 servers are at risk.

A hacker claims to have good intentions - but do they, really?

Google Cloud Application Integration is being abused to generate phishing emails leading victims to fake Microsoft login sites.

A new report shows how risky software supply chains really are, and how AI only makes it worse.

For many, 2025 will be remembered by outages and lost revenue opportunities.

SMS scams are on the rise but there are ways to easily spot them.

AI is no longer being used just to craft convincing phishing emails - it's being used to build ransomware.

Two Chrome extensions were found eavesdropping on people's browsing, stealing login credentials and payment card information.

Six months after the breach, Aflac determines how many people are affected and starts reaching out.

Multiple post office sites and services are inaccessible as teams scramble to restore them.

Security researchers find 15 malicious repositories, all deploying a dropper for the WebRAT backdoor.

A fork of a popular project was found on npm, but not before it amassed tens of thousands of downloads.

Prompt injection might never go away, OpenAI says, as it compares it to phishing.

The September 2025 breach at Red Hat also exposed Nissan customer files -affecting around 21,000 people.

Cl0p claims another victim as University of Phoenix confirms losing data of around 3.5 million people.

An unknown threat actor wreaked some serious havoc but operations are continuing unabated.

Many popular devices are now vulnerable to direct memory access attacks, but there is a patch.