Editors' Pick 

BlackFile vishing zsarolási műveletei

Geronimo

A Google Threat Intelligence és az RH-ISAC elemzése szerint a BlackFile nevű extorziós csoport 2026 eleje óta intenzív vishing kampányokat

Editors' Pick 

FamousSparrow APT aktvitása

Geronimo

A Bitdefender kutatása szerint a kínai kötődésű FamousSparrow APT-csoport 2025 vége és 2026 eleje között több hullámban támadott egy azeri

Editors' Pick 

TencShell malware

Geronimo

A Cato CTRL kutatása szerint egy feltételezetten kínai kötődésű fenyegető szereplő egy globális gyártóvállalat indiai telephelyét próbálta kompromittálni egy új,

Zero Trust alapelvek alkalmazása OT környezetekben

TrainedR

Észtország: Átfogó kiberbiztonság, felkészültség és versenyképesség

TrainedR

Közösségi média használat tiltása a tinédzsereknek Európában

TrainedR

AI-alapú kibertámadási képességek fejlődése 

Geronimo

Gamaredon aktivitás

Geronimo

Gemstuffer malware 

Geronimo

Fragnesia Linux kernel sérülékenység

Geronimo

TeamPCP ellátási lánc támadásai

Geronimo

The Gentlemen szivárgás

Geronimo

Chipmaker Patch Tuesday 

Geronimo

Javított zero-click

Geronimo

AI-SBOM útmutató

Geronimo

News

News 

MacBook Neo Thermal Mod Can Boost Performance Up to 20%

Yanac

If you’re the tech tinkerer type and you don’t mind potentially voiding your MacBook Neo warranty, you can perform a

Microsoft rejects critical Azure vulnerability report, no CVE issued

Yanac

U.S. CISA adds a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog

Yanac
Snap, YouTube, and TikTok settle suit over harm to students

Snap, YouTube, and TikTok settle suit over harm to students

Yanac
Order, character and time preserved in China’s classical furniture

Order, character and time preserved in China’s classical furniture

Yanac
Russian APT Turla builds long-term access tool with Kazuar Botnet evolution

Russian APT Turla builds long-term access tool with Kazuar Botnet evolution

Yanac
Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

Yanac
AI-generated code is ‘pain waiting to happen’

AI-generated code is ‘pain waiting to happen’

Yanac

Kiberbiztonsági hírek

Vendors' news

Living Off the Pipeline: Defending Against CI/CD Subversion 

Living Off the Pipeline: Defending Against CI/CD Subversion 

Yanac

Mini Shai-Hulud: The Worm Returns and Goes Public 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 20 

The Good, the Bad and the Ugly in Cybersecurity – Week 20 

Yanac

Legacy Out of Contract 

Yanac
Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files 

Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files 

Yanac

Life with the Penguin

Finding the blind spot: How Canonical hunts logic flaws with AI

Yanac
Linux Security Monitoring Challenges and EDR Visibility Gaps

Linux Security Monitoring Challenges and EDR Visibility Gaps

Yanac

Fragnesia Linux kernel local privilege escalation vulnerability mitigations

Yanac
Linux Kernel Fragnesia Critical Privilege Escalation CVE-2026-46300

Linux Kernel Fragnesia Critical Privilege Escalation CVE-2026-46300

Yanac
Why Red Hats krb5 Update Matters for Linux and Windows Authentication 

Why Red Hats krb5 Update Matters for Linux and Windows Authentication 

Yanac

Check this out

Swedish fugitive arrested as new OTF GRIMM targets added to EU Most Wanted

Yanac

EU Most Wanted platform helps locate Hungarian child abuser hiding in Spain

Yanac

Atlantic ‘Cocaine Highway’ broken in coordinated maritime operation

Yanac

Europol announces transition arrangements following the departure of Executive Director Catherine De Bolle

Yanac

“Terrorgram” network dealt another blow as member sentenced in Denmark

Yanac

CERT news

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

Featured categories

BlackFile vishing zsarolási műveletei
Editors' Pick

BlackFile vishing zsarolási műveletei

Geronimo
FamousSparrow APT aktvitása
Editors' Pick

FamousSparrow APT aktvitása

Geronimo
TencShell malware
Editors' Pick

TencShell malware

Geronimo
Zero Trust alapelvek alkalmazása OT környezetekben
Editors' Pick

Zero Trust alapelvek alkalmazása OT környezetekben

TrainedR

IOT

ICS

5G trends

Best Smoke Detectors and Dual Alarms for 2026: Lab Tested

Best Smoke Detectors and Dual Alarms for 2026: Lab Tested

Yanac
Govee’s Garden Lights Hit $95, Their Best Amazon Price Yet

Govee’s Garden Lights Hit $95, Their Best Amazon Price Yet

Yanac
Best Smart Home Devices of 2026: Upgrades for Every Room

Best Smart Home Devices of 2026: Upgrades for Every Room

Yanac
Ring Brings Its Retinal 2K Resolution to Spotlight and Floodlight Cameras

Ring Brings Its Retinal 2K Resolution to Spotlight and Floodlight Cameras

Yanac
Best Home Pet Cameras of 2026: Remote Check-In and Much More

Best Home Pet Cameras of 2026: Remote Check-In and Much More

Yanac

CMU’s Electrotech Moneyball paper warns China-linked AI, grid technologies threaten US energy infrastructure security

Yanac

Twill Typhoon used legitimate Windows tools, DLL sideloading, FDMTP backdoor in APAC espionage campaign

Yanac

NIST advances nine post-quantum signature algorithms as race to secure data from quantum attacks intensifies

Yanac

NCC Group warns ransomware attacks on OT-heavy industrial environments are intensifying amid IT/OT convergence

Yanac

GDIT and NightDragon partner to boost emerging technology adoption for US government

Yanac
For May, Patch Tuesday means 139 updates — but no zero-days

For May, Patch Tuesday means 139 updates — but no zero-days

Yanac
Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes

Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes

Yanac
Why Apple needs Intel — and America needs them both

Why Apple needs Intel — and America needs them both

Yanac
Here’s one career emerging from the AI shift: ‘forward-deployed engineers’

Here’s one career emerging from the AI shift: ‘forward-deployed engineers’

Yanac
Windows 11 Insider Previews: What’s in the latest build?

Windows 11 Insider Previews: What’s in the latest build?

Yanac

Vulnerabilities

CVE-2026-8754 | AstrBotDevs AstrBot up to 4.23.5 File Upload chat.py post_file filename path traversal

Yanac

CVE-2026-8755 | fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c Model hiyoriUI.py _get_all_models path traversal

Yanac

CVE-2026-8756 | fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c Gradio Interface webui_preprocess.py generate_config data_dir path traversal

Yanac

CVE-2026-8757 | adenhq hive up to 0.11.0 Delete Request routes_sessions.py _read_events_tail path traversal

Yanac

CVE-2026-8758 | Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06 /common/jsp/upload3.jsp File unrestricted upload

Yanac

CVE-2026-8759 | xiandafu beetl up to 3.20.2 SpELFunction SpELFunction.java expression language injection (IIYAWC)

Yanac

CVE-2020-37227 | Heliossolutions HS Brand Logo Slider 2.1 Admin Interface logoupload unrestricted upload (Exploit 48913)

Yanac

CVE-2020-37235 | themeftc Theme Wibar 1.1.8 on WordPress Brand ftc_brand_url cross site scripting (Exploit 49107)

Yanac

CVE-2020-37228 | Yerootech iDS6 DSSPro Digital Signage System 6.2 Login Endpoint excessive authentication (Exploit 48991)

Yanac

CVE-2020-37233 | BuddyPress Plugin 6.2.0 on WordPress figure cross site scripting (Exploit 49061)

Yanac

CVE-2020-37232 | Iobit Advanced System Care Service 13.0.0.157 unquoted search path (Exploit 49049)

Yanac

CVE-2020-37229 | Oki sPSV Port Manager 1.0.41 sPSVOpLclSrv Service unquoted search path (Exploit 49005)

Yanac

CVE-2020-37230 | Syncplify Syncplify.me Server 5.0.37 unquoted search path (Exploit 49009)

Yanac

CVE-2020-37231 | Cybertronsoft Privacy Drive 3.17.0 pdsvc.exe unquoted search path (Exploit 49023)

Yanac

CVE-2020-37234 | Internetdownloadmanager Internet Download Manager 6.38.12 buffer overflow (Exploit 49083)

Yanac

CVE-2020-37236 | Netartmedia NewsLister 1.0 News Addition Interface Title cross site scripting (Exploit 49160)

Yanac

CVE-2021-47977 | Gotmls Anti-Malware Security and Bruteforce Firewall Plugin duplicator_download path traversal (Exploit 50107)

Yanac

CVE-2021-47979 | Miniorange Backup and Restore Plugin 1.0.3 on WordPress admin-ajax.php file_name path traversal (Exploit 50503)

Yanac

CVE-2021-47952 | Jsonpickle python jsonpickle 2.0.0 eval code injection (Exploit 49585)

Yanac

CVE-2021-47954 | LayerBB 1.1.4 POST Request /search.php search_query sql injection (Exploit 49593)

Yanac

CVE-2020-37246 | Supsystic Backup 2.3.9 admin.php Download filename control (Exploit 49545)

Yanac
Take me home!

Follow Us:

Rss Linkedin