Sead Fadilpašić

Hackers are building on their salting technique to bypass email protection, track users, and redirect them to phishing pages.

Both bugs were fixed in January 2025, but users should update immediately.

StilachiRAT malware hides easily, allows for remote code execution, and steals data.

More than 12,000 GitHub users were targeted so far.

A "dead simple" attack allows threat actors to take over vulnerable Apache Tomcat servers.

A supply chain attack attempted to expose login credentials from tens of thousands of companies.

Black Basta's leaked chat logs reveal brute-forcing tool called BRUTED, used since 2023.

A researcher was able to crack how Akira encrypts files, and created a brute-force tool.

Hackers are impersonating Adobe, DocuSign and more to steal login credentials and deploy malware.

Experts warn overconfidence creates a false sense of security and opens the doors to cyberattacks.

ESHYFT was keeping a large database without a password, containing all sorts of sensitive data.

Researchers saw six distinct backdoor samples being used in this campaign.

A new automation builder is now available in both Wix and Wix Studio, with additional options available for premium users.

Among the problems were two critical severity issues which allowed threat actors to bypass authentication.

Medusa ransomware has been around since 2021, targeting more than 300 critical infrastructure firms, CISA warns.

Tens of thousands of dollars were seen in wallets belonging to the attackers.

The new offering is now available in English.

The infostealer has been upgraded after three years.

The bug was addressed in a recent patch.

The goal of the campaign is to steal people’s payment and personal data.