Editors' Pick 

Figyelmeztetések célzott felderítésről és kémkedésről

Geronimo

Az Apple december elején újabb hullámban küldött kiberfenyegetési értesítéseket felhasználóknak 84 országban.  A vállalat közleménye szerint ez a lépés, hogy megvédjék

Editors' Pick 

AI-vel előállított meztelen fotók szivárgása

Geronimo

A Wired beszámolója szerint egy olyan startup adatbázisa, amely AI-alapú kép- és videó-generálással foglalkozott, köztük nudify és face-swap szolgáltatásokkal, hibásan

Editors' Pick 

Virtuális emberrablási csalás

Geronimo

Az FBI Las Vegas-i kirendeltsége arra figyelmezteti a helyieket, hogy készüljenek fel a virtuális emberrablási csalások egy új, kellemetlen fordulatára,

Brickstorm backdoor

Geronimo

Warp Panda kémkedése

Geronimo

Lazarus Group IT-munkás műveletek

Geronimo

Izraeli kém-szoftver ipar – szankciók nélkül

Geronimo

Share and Defend jelentés

Geronimo

Bundespolizei drónellenes egysége

Geronimo

ValleyRAT kampány

Geronimo

Cloudflare 2025 Q3 DDoS jelentés

Geronimo

Adatbiztonság mesterséges intelligencia környezetekben

TrainedR

Calisto kampány

Geronimo

Rendőrségi teszt az arcfelismerő technológiával

Geronimo

Amerikai Hadügyminisztérium Zero Trust útmutatója OT környezetekre

TrainedR

News

Apple’s chip chief might be the next exec to leave
News 

Apple’s chip chief might be the next exec to leave

Yanac

Bloomberg’s Mark Gurman is reporting that Johny Srouji, senior vice president of hardware technologies, told Tim Cook he is “seriously

New wave of VPN login attempts targets Palo Alto GlobalProtect portals

Yanac

React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable

Yanac
Ending Soon: Samsung’s Cyber Week Event With Low Prices on The Frame TV, Gaming Monitors, and More

Ending Soon: Samsung’s Cyber Week Event With Low Prices on The Frame TV, Gaming Monitors, and More

Yanac
Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs

Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs

Yanac
The Nintendo Switch 2 and Ninja’s Creami are the best deals of the week

The Nintendo Switch 2 and Ninja’s Creami are the best deals of the week

Yanac
The tech world is sleeping on the most exciting Bluetooth feature in years

The tech world is sleeping on the most exciting Bluetooth feature in years

Yanac
Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Yanac

Kiberbiztonsági hírek

Vendors' news

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know 

Yanac
CVE-2025-55182: Critical Vulnerability, React2Shell, Allows for Unauthenticated RCE 

CVE-2025-55182: Critical Vulnerability, React2Shell, Allows for Unauthenticated RCE 

Yanac
From React to Remote Code – Protecting Against the Critical React2Shell RCE Exposure 

From React to Remote Code – Protecting Against the Critical React2Shell RCE Exposure 

Yanac
New Prompt Injection Attack Vectors Through MCP Sampling 

New Prompt Injection Attack Vectors Through MCP Sampling 

Yanac

Reliability Isn’t a Feature. It’s a Commitment. 

Yanac

Life with the Penguin

Enhancing Linux Email Security: Identify Malicious Attachments Effectively

Enhancing Linux Email Security: Identify Malicious Attachments Effectively

Yanac
Secure Boot: Strengthening Linux System Integrity from the Firmware Up

Secure Boot: Strengthening Linux System Integrity from the Firmware Up

Yanac
From cloud to dashboard: experience the future of infotainment development at CES 2026

From cloud to dashboard: experience the future of infotainment development at CES 2026

Yanac
Exploring AI Predictive Cybersecurity Models for Linux Systems

Exploring AI Predictive Cybersecurity Models for Linux Systems

Yanac
Canonical announces Ubuntu Pro for WSL 

Canonical announces Ubuntu Pro for WSL 

Yanac

Check this out

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill

Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill

Yanac

Friday Squid Blogging: Vampire Squid Genome

Yanac

Airport Cybersecurity: Defend Data from Juice Jacking & Public Wi-Fi Threats

Yanac

In Other News: X Fined €120 Million, Array Flaw Exploited, New Iranian Backdoor

Yanac

Cloudflare Outage Caused by React2Shell Mitigations

Yanac

CERT news

Podatność w oprogramowaniu routerów SDMC NE6037

Yanac

Vulnerability in Simple SA Wirtualna Uczelnia software

Yanac

Podatność w oprogramowaniu Simple SA Wirtualna Uczelnia

Yanac

Featured categories

Figyelmeztetések célzott felderítésről és kémkedésről
Editors' Pick

Figyelmeztetések célzott felderítésről és kémkedésről

Geronimo
AI-vel előállított meztelen fotók szivárgása
Editors' Pick

AI-vel előállított meztelen fotók szivárgása

Geronimo
Virtuális emberrablási csalás
Editors' Pick

Virtuális emberrablási csalás

Geronimo
Brickstorm backdoor
Editors' Pick

Brickstorm backdoor

Geronimo

IOT

ICS

5G trends

Free Your Phone From Too Many Home Apps With 5 Effective Steps

Free Your Phone From Too Many Home Apps With 5 Effective Steps

Yanac
6 Settings That Make Nest and Google Devices 100x More Useful

6 Settings That Make Nest and Google Devices 100x More Useful

Yanac
Light Up Your Black Friday While You Still Can With $101 Off Permanent Outdoor Lights

Light Up Your Black Friday While You Still Can With $101 Off Permanent Outdoor Lights

Yanac
Best Smart Home Safes for 2025: We Cracked the Code

Best Smart Home Safes for 2025: We Cracked the Code

Yanac
Best Google Smart-Home Devices in 2025

Best Google Smart-Home Devices in 2025

Yanac

iOT365 rolls out unified OT security platform with native protocol discovery, automated CVE analysis

Yanac

Censys, Rilian Technologies team up to strengthen national and critical infrastructure cyber defense

Yanac

COPT Defense Properties joins Operational Technology Cybersecurity Coalition

Yanac

Emerson, Armexa collaborate to provide expanded cybersecurity services for DeltaV automation platform customers

Yanac

CISA, NSA sound alarm on Brickstorm backdoor used by China-linked actors targeting VMware, Windows systems

Yanac
Insecure use of Signal app part of wider Department of Defense problem, suggests Senate report

Insecure use of Signal app part of wider Department of Defense problem, suggests Senate report

Yanac
Who would listen to AI ‘music?’

Who would listen to AI ‘music?’

Yanac
M365 customers should explore alternatives, plan to dicker as prices hikes loom — analysts

M365 customers should explore alternatives, plan to dicker as prices hikes loom — analysts

Yanac
The new Apple thinks different?

The new Apple thinks different?

Yanac
OpenAI prompts AI models to ‘confess’ when they cheat

OpenAI prompts AI models to ‘confess’ when they cheat

Yanac

Vulnerabilities

CVE-2025-14192 | RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2 auth_login.php Username sql injection

Yanac

CVE-2025-14193 | code-projects Employee Profile Management System 1.0 /view_personnel.php per_id sql injection

Yanac

CVE-2025-14194 | code-projects Employee Profile Management System 1.0 /view_personnel.php per_address/dr_school/other_school cross site scripting

Yanac

CVE-2025-14195 | code-projects Employee Profile Management System 1.0 add_file_query.php per_file unrestricted upload

Yanac

CVE-2025-14196 | H3C Magic B1 up to 100R004 /goform/aspForm sub_44de0 param buffer overflow

Yanac

CVE-2025-14197 | Verysync 微力同步 up to 2.21.3 Web Administration f96956469e7be39d information disclosure

Yanac

CVE-2025-14198 | Verysync 微力同步 2.21.3 Web Administration download?key=dummytoken information disclosure

Yanac

CVE-2025-14199 | Verysync 微力同步 up to 2.21.3 Web Administration text.txt?override=false unrestricted upload

Yanac

CVE-2025-14200 | alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f Request Pending Page /usersub.php cross site scripting

Yanac

CVE-2025-14201 | alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f /dishsub.php item.name cross site scripting

Yanac

CVE-2025-14191 | UTT 进取 512W up to 1.7.7-171114 formP2PLimitConfig strcpy except buffer overflow

Yanac

CVE-2025-14185 | Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp AppServletService.class usercode sql injection

Yanac

CVE-2025-14186 | Grandstream GXP1625 1.0.7.4 Network Status Page /cgi-bin/api.values.post vpn_ip cross site scripting

Yanac

CVE-2025-14187 | UGREEN DH2100+ up to 5.3.0.251125 nas_svr /v1/file/backup/create handler_file_backup_create path buffer overflow

Yanac

CVE-2025-14188 | UGREEN DH2100+ up to 5.3.0.251125 nas_svr /v1/file/backup/create handler_file_backup_create path command injection

Yanac

CVE-2025-14189 | Chanjet CRM up to 20251121 jxf_dump_table_demo.php gblOrgID sql injection

Yanac

CVE-2025-14190 | Chanjet TPlus up to 20251121 currentAccId sql injection

Yanac

CVE-2025-13292 | Google Cloud Apigee-X up to 1-16-0-apigee-2 Analytics privileges management

Yanac

CVE-2025-14182 | Sobey Media Convergence System 2.0/2.1 upload File path traversal

Yanac

CVE-2025-14183 | SGAI Space1 NAS N1211DS up to 1.0.915 gsaiagent /cgi-bin/JSONAPI GET_FACTORY_INFO/GET_USER_INFO credentials storage

Yanac

CVE-2025-14184 | SGAI Space1 NAS N1211DS up to 1.0.915 gsaiagent /cgi-bin/JSONAPI RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD command injection

Yanac
Take me home!

Follow Us:

Rss Linkedin