Sami Laiho

Chief Research Officer (opinions are my own) / #1 & #2 at Ignite 2018 / Best Session - NIC x 5 / MVP Windows OS / / PluralsightAuthor

[Sami Laiho @samilaiho]

Malicious Firefox add-ons caught stealing cryptowallet seed phrases and
browser credentials
https://t.co/FciUnj5JKr

[Sami Laiho @samilaiho]

ReliaQuest confirms failed data-theft attack after ShinyHunters breach
https://t.co/NAFje4BvUp

[Sami Laiho @samilaiho]

Microsoft Teams now lets admins block external bots from meetings
https://t.co/lnC7rvOoCd

[Sami Laiho @samilaiho]

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take
Over Any Account
https://t.co/iiBNV03V0t

[Sami Laiho @samilaiho]

CISA orders urgent patching of actively exploited Zimbra flaw
https://t.co/wioxZMu2bq

[Sami Laiho @samilaiho]

Instance template path traversal allows arbitrary host file write as root
URL: https://t.co/nhK5ySOyY2
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9

[Sami Laiho @samilaiho]

https://t.co/M6Qw48bG3e

[Sami Laiho @samilaiho]

Iran-Linked Hackers Force UK Power Plant Offline in Unprecedented Four-Day
Cyberattack
https://t.co/twKCGOfOPB

[Sami Laiho @samilaiho]

A New Era of Bulletproof Hosting Providers Emerge
https://t.co/ALBIrUaRuY

[Sami Laiho @samilaiho]

MLflow Flaw Opens a Path to Cloud Credentials Theft
https://t.co/dmbUxiPQdK

[Sami Laiho @samilaiho]

ToxicPanda Android malware uses VPN permissions to block Google Play
https://t.co/wemIxnpL9L

[Sami Laiho @samilaiho]

I’m really looking forward to Experts Live Sweden 2026 — and this year, I’ll be taking the stage with two keynotes. 👋

Experts Live Sweden brings together Microsoft 365 professionals, cloud specialists and security experts from across Sweden. I’m excited to share insights, meet fellow experts and, of course, enjoy the community that makes events like this so valuable. 🔐💡

🎟️🔥 Secure your spot and I’ll see you there! You get 10% off from me with the code: ELSE26‑SAMI

👉 https://t.co/rxayXk65iN
📅 13 October 2026
📍 Stockholm

See you there! 🙌

#ELSE26 #ExpertsLiveSweden #ExpertsLive

[Sami Laiho @samilaiho]

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy
Botnet
https://t.co/989aKKTnXL

[Sami Laiho @samilaiho]

Connecting the Dots: Securing the Overlooked Corners of the Software
Development Lifecycle (SDLC) Supply Chain
https://t.co/dFNsweHPqb

[Sami Laiho @samilaiho]

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
https://t.co/cvvoZ49Uxm

[Sami Laiho @samilaiho]

Russian network monitoring firm confirms cyberattack claimed by pro-Ukraine
hackers
https://t.co/2UeQk5dSdV

[Sami Laiho @samilaiho]

New SynkLoader malware pushed in Microsoft Teams phishing campaign
https://t.co/PKnOuucU7N

[Sami Laiho @samilaiho]

Death By 20,000 PoCs
https://t.co/f6jXVvgpPo

VulnCheck researchers curated 20K+ public exploits and vulnerability analyses
in 2025. As of mid-August 2026, we’ve already reviewed 17,800+ PoCs and
write-ups, putting us 87% of the way to 2025’s numbers with another 4.5 months
left to go in the year.

[Sami Laiho @samilaiho]

Researchers Social-Engineered Copilot Into Exposing Flaw
https://t.co/MjeHJO2rcz

[Sami Laiho @samilaiho]

Hundreds of leaked AWS keys give full control over corporate accounts
https://t.co/FMR4VyuiRh