Sead Fadilpašić

A 10/10 RCE flaw was found in HPE OneView, but it's not yet being abused.

The firewall maker found a critical RCE that is being abused in the wild.

DXS International was hit by ransomware, but we don't know if any files were stolen.

Security researchers found multiple vulnerabilities on Eurostar platform, including the ability to bypass guardrails.

Several hundred machines across a diverse set of organizations already compromised, Microsoft says.

Two Chinese-nexus groups have been exploiting a newly discovered flaw to establish persistence and launch backdoors.

Generate dedicated URLs for payment with Pay Links.

The attack seems to have happened in October but the risk towards citizens is minimal.

Businesses are rushing to deploy AI, creating overly permissioned, misconfigured systems.

Researchers spotted multiple groups using the same technique and believe it's only going to get worse.

Researchers discovered a new botnet called Kimwolf, allegedly built by the same brain behind AISURU.

The December 2025 Patch Tuesday update broke a few things - and the fix is not yet done.

Cl0p claimed to have breached LKQ, but the attack was confirmed only recently.

A poisoned Asus utility tool was found floating around the web, granting attackers abilities to "perform unintended actions".

A patch has not yet been released, so Cisco advises rebuilding any affected instances.

The company named its chatbot "Copilot" and promises better productivity for sales, marketing, and customer success departments.

A legitimate PayPal platform is being abused to bypass email protections and send phishing messages.

The attacks were stopped, but they could always return - if users don't strengthen their passwords.

More than a dozen Firefox extensions were secretly stealing money from affiliates and tracking people's behavior.

Several dozen entities were recently targeted with an updated backdoor.

Two new Fortinet flaws are being actively abused in the wild in reconnaissance attacks.

ShinyHunters claims responsibility for the attack, saying they stole almost 100GB of sensitive Pornhub Premium user data.

About a fifth of Soundcloud's user base had email details stolen, but banking and login information was unaffected

For years, the GRU was snooping in critical infrastructure firms by abusing misconfigurations and zero-days, Amazon says.