Sead Fadilpašić

A huge database was found sitting online without a password, offering sensitive user data to anyone who found it.

Almost a dozen popular apps kept hardcoded AWS and Azure cloud credentials.

There are no workarounds, and the company suggests applying the patch ASAP.

Plugins are displaying fake popups, scaring WordPress users into downloading malware.

Ghostpulse malware appears to have greatly evolved over the last two years.

Roundcube security flaw is being exploited to target government firms.

Many organizations still have active accounts that haven't been used in ages, and passwords that haven't been changed in just as long.

As the holiday season draws ever closer, the amount of cyberattacks companies are experiencing grows.

Some providers acknowledged the findings.

Cisco stands by its assessment that there was no breach, despite contrary evidence.

Nidec decided not to pay ransom for the stolen files.

Both companies acknowledged the existence of new flaws and are addressing them.

The company claims to have found evidence of in-the-wild abuse.

Globe Life says it did not suffer a ransomware attack but it did lose customer data.

Be careful when receiving video call invitations, especially those bringing up camera and microphone errors.

A bug caused Microsoft to lose the logs for multiple products.

A patch is already available, so make sure to apply it ASAP.

C and C++ aren't going away any time soon.

The advisory contains important guidelines on staying secure and spotting attacks.

A company kept its database unprotected on the internet, leaving hundreds of thousands of CVs open.

Two members of Anonymous Sudan are no longer anonymous as indictments are unsealed.

A scammer was working for four months at the company, stealing sensitive information.