Sead Fadilpašić

Second patch for E-Business Suite has been released to address a string of recent attacks.

SimonMed Imaging suffered at the hands of Medusa, but has since been removed from Medusa's data leak site.

A new Russian hacktivist group boasted about breaking into a critical infrastructure firm, not knowing it was all a fake.

CEOs and chairs urged to take "concrete action" and secure their businesses against rising threats.

Windows 10 hits EoL, meaning users will no longer receive crucial security updates.

Zero-click flaws are usually leveraged by state-sponsored actors against high-profile targets.

You don't need to share your banking details to get the refund - it goes out automatically.

The FBI tries to stop ShinyHunters hackers from leaking Salesforce data.

Scattered Lapsus$ Hunters leaked files on the dark web after negotiations broke down.

Gladinet CentreStack and Triofox are carrying a flaw that enables RCE, but a mitigation is available.

A new Android malware looks to target mobile users with fake apps.

RondoDox doesn't seem to care if it gets spotted infecting IoT devices.

Payroll pirate is targeting thousands of university employees, with some losing their salaries in attacks.

MySonicWall customers should be taking serious precautions.

The attacks started a lot earlier than previously thought, and bear the hallmarks of multiple threat actors.

Hackers are mixing cache smuggling with identity theft and phishing to bypass protections and deploy malware.

A command injection flaw was recently found in an npm package used to connect Figma to AI agents.

The hackers' goal is still to extort the victims for money, experts warn.