Sead Fadilpašić

The Prometheus toolkit has flaws that can be abused for data leaks, DoS attacks, and more.

Millions of people were tricked by fake promotional offers, and had personal details stolen.

Zero-day flaw was being actively used to launch attacks, and possibly even ransomware.

AI Site-Chat is a feature designed to serve as a virtual agent for customers, boosting customer experience and helping with lead generation.

Roughly 8,800 WordPress sites are still at risk.

There is a way to abuse accessibility features on Windows to hide malware, similar to how it's done on Android.

Hackers tried to access user data, but it's unclear if they succeeded.

Some Krispy Kreme services were disrupted, but not in-store operations.

Researchers found a way to access sensitive data on AMD devices using a Raspberry Pi Pico and physical access.

WPForms patch is now available, so apply it ASAP.

The company urges users to upgrade to the latest version immediately.

Leading Mexican fintech startup leaked 1.7 million people's ID cards and selfies.

A bug, allowing data exfiltration in top file-sharing tools, is being abused in the wild, experts warn.

With prompt injections, crooks could get AI to write, compile, and run, malware.

Many sites were misconfigured, allowing hackers to exfiltrate sensitive data and sell it on the dark web.

Artivion confirms security breach in new 8-K filing, saying the investigation is ongoing.

Electrica Group claims to have addressed the problem already, and says operations were not affected.

Termite group claims it stole hundreds of gigabytes of sensitive data.

Browser isolation can easily be bypassed with QR codes, but the method has its drawbacks.