Editors' Pick 

DarkCrystal RAT kampány

Geronimo

A Trellix Advanced Research Center egy aktív DarkCrystal RAT kampányt elemzett, amely több, egymást kiegészítő technikával próbálja megkerülni a biztonsági megoldásokat. A fertőzés adathalász e-maillel indul,

Editors' Pick 

WS-Trust Autologon password spraying

Geronimo

A Varonis Threat Labs egy olyan, kevéssé ismert Microsoft Entra ID sajátosságra hívta fel a figyelmet, amely lehetővé teszi a password spraying támadások hatékonyságának növelését. A

Editors' Pick 

CoolClient back door rootkittel

Geronimo

A Kaspersky GReAT kutatói azonosították a HoneyMyte APT-csoport CoolClient back door egy új változatát, amely első alkalommal Windows kernel-szintű rootkitet is telepít. Az új verzió már nem csupán

Nemzetközi banki csalás

Geronimo

macOS Screen Sharing kihasználás

Geronimo

Kompromittáció után tartós hozzáférés

Geronimo

Vita az Europol hatáskörének bővítéséről

Geronimo

Apple Threat Notifications

Geronimo

Németország: bővülő jogkörök a hírszerző szolgálatoknál

TrainedR

Jewelbug kampányok

Geronimo

Malware crypting szolgáltatások 

Geronimo

Aktív kiberműveletek a magánszektorból

Geronimo

PATCHCORD

Geronimo

434 000 CI/CD pipelinet kompromittáltak

Geronimo

Windows Safe Mode Akira előtt

Geronimo

News

SafePal data breach impacts 39,798 customers, stolen info for sale
News 

SafePal data breach impacts 39,798 customers, stolen info for sale

Yanac

Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited

Anthropic confirms Claude is down in major outage affecting multiple services

Anthropic confirms Claude is down in major outage affecting multiple services

Yanac
OpenAI reportedly disbanded its preparedness team

OpenAI reportedly disbanded its preparedness team

Yanac
Open Mike Eagle and Kenny Segal crafted a hip hop breakup masterpiece

Open Mike Eagle and Kenny Segal crafted a hip hop breakup masterpiece

Yanac

AMA with Black Hat Speakers Lidor B. & Elad Meged (Pre-Auth RCE in Enterprise Java, Hijacking AI Coding Agents)

Yanac

CVE-2026-6837: Command Injection in Zyxel export-cgi PKCS#12 Export Handling

Yanac
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110

Yanac
Amazon is trying to crush class-action suits before they get started

Amazon is trying to crush class-action suits before they get started

Yanac

Kiberbiztonsági hírek

Vendors' news

40,000 WordPress Sites affected by Authentication Bypass Vulnerability in User Profile Builder WordPress Plugin 

40,000 WordPress Sites affected by Authentication Bypass Vulnerability in User Profile Builder WordPress Plugin 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 33 

The Good, the Bad and the Ugly in Cybersecurity – Week 33 

Yanac
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026) 

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026) 

Yanac

The OWASP Top 10 for LLM Applications 2026: From Model Risks to Agentic Security 

Yanac
Secure all your internal vibe-coded applications — in one click 

Secure all your internal vibe-coded applications — in one click 

Yanac

Life with the Penguin

Linux BPF Patches Fix Sparse CPU Bugs Causing Out-of-Bounds Read

Linux BPF Patches Fix Sparse CPU Bugs Causing Out-of-Bounds Read

Yanac
Routing Security in Practice: Detecting BGP Hijacks and RPKI-Invalid Announcements

Routing Security in Practice: Detecting BGP Hijacks and RPKI-Invalid Announcements

Yanac
Linux Audit Can Log a Syscall but Miss the Flag That Explains It

Linux Audit Can Log a Syscall but Miss the Flag That Explains It

Yanac
eBPF Security Logs May Show the Wrong File or Command, New Study Warns

eBPF Security Logs May Show the Wrong File or Command, New Study Warns

Yanac
Linux Security Roundup Privilege Escalation DoS Code Execution August 2026

Linux Security Roundup Privilege Escalation DoS Code Execution August 2026

Yanac

Check this out

1.6 Million Likely Impacted by RingCentral Data Breach

Yanac

Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

Yanac

If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

Yanac
Who’s Tracking You? Use This New Service to Find Out

Who’s Tracking You? Use This New Service to Find Out

Yanac

Trivy, Not LiteLLM Behind the 2,500 Org Compromise

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

DarkCrystal RAT kampány
Editors' Pick

DarkCrystal RAT kampány

Geronimo
WS-Trust Autologon password spraying
Editors' Pick

WS-Trust Autologon password spraying

Geronimo
CoolClient back door rootkittel
Editors' Pick

CoolClient back door rootkittel

Geronimo
Nemzetközi banki csalás
Editors' Pick

Nemzetközi banki csalás

Geronimo

IOT

ICS

5G trends

7 Easy Home Upgrades to Prep for Fires the Smart Way

7 Easy Home Upgrades to Prep for Fires the Smart Way

Yanac
Best Smart Home Devices of 2026: Everyday Upgrades

Best Smart Home Devices of 2026: Everyday Upgrades

Yanac
9 Home AI Tricks I’ve Found Work Best in My Busy Life

9 Home AI Tricks I’ve Found Work Best in My Busy Life

Yanac
Light Up the Night With This Govee Lamp Post, Now at a New Low Price

Light Up the Night With This Govee Lamp Post, Now at a New Low Price

Yanac
Pets Left in a Ruff Spot After Automatic Feeders Go Down

Pets Left in a Ruff Spot After Automatic Feeders Go Down

Yanac

Crytica Security, Forescout integrate deterministic threat detection with Vistaro to strengthen device security

Yanac

Nozomi, Sophos bring OT intelligence into IT security investigations, target detection and visibility gap

Yanac

NIST targets NVD modernization as AI transforms vulnerability discovery, risk assessment and remediation

Yanac

Symantec reveals Jewelbug espionage campaign targeting Asian governments, telecoms, critical infrastructure

Yanac

Acronis exposes Patchcord cyber espionage campaign targeting telecom and critical infrastructure in South Asia

Yanac
August’s Patch Tuesday is a monster: 751 fixes, with an exploited Windows flaw

August’s Patch Tuesday is a monster: 751 fixes, with an exploited Windows flaw

Yanac
Microsoft brings Copilot apps together ahead of ‘super app’ overhaul

Microsoft brings Copilot apps together ahead of ‘super app’ overhaul

Yanac
How to replace Edge as the default browser in Windows — and why you shouldn’t

How to replace Edge as the default browser in Windows — and why you shouldn’t

Yanac
OpenAI loses its AI ethics lead

OpenAI loses its AI ethics lead

Yanac
Meta gives up control of Chinese AI startup Manus after eight months

Meta gives up control of Chinese AI startup Manus after eight months

Yanac

Vulnerabilities

Debian 11 Unzip Critical Arbitrary Code Exec Flaw DLA-4741-1

Debian 11 Unzip Critical Arbitrary Code Exec Flaw DLA-4741-1

Yanac
openSUSE Tumbleweed cargo-audit Moderate CVE-2026-25541

openSUSE Tumbleweed cargo-audit Moderate CVE-2026-25541

Yanac
openSUSE Chromedriver Moderate Multiple Issues Fixed 2026-11511-1

openSUSE Chromedriver Moderate Multiple Issues Fixed 2026-11511-1

Yanac
openSUSE ffmpeg Moderate Security Issue Advisory 2026-11515-1

openSUSE ffmpeg Moderate Security Issue Advisory 2026-11515-1

Yanac
openSUSE Tumbleweed Containerized Data Importer Moderate Issue 2026-11514-1

openSUSE Tumbleweed Containerized Data Importer Moderate Issue 2026-11514-1

Yanac
openSUSE Tumbleweed cargo-c Moderate CVE-2026-25541 Advisory 2026-11513-1

openSUSE Tumbleweed cargo-c Moderate CVE-2026-25541 Advisory 2026-11513-1

Yanac
openSUSE Tumbleweed go1.26 Important Security Threat Update 2026-11517-1

openSUSE Tumbleweed go1.26 Important Security Threat Update 2026-11517-1

Yanac
openSUSE Tumbleweed kubeshark-cli Moderate Threat Advisory 2026-11519-1

openSUSE Tumbleweed kubeshark-cli Moderate Threat Advisory 2026-11519-1

Yanac
openSUSE Tumbleweed go1.25 Moderate Security Update Vuln 2026-11516-1

openSUSE Tumbleweed go1.25 Moderate Security Update Vuln 2026-11516-1

Yanac
openSUSE gzip Moderate Threat Advisory CVE-2026-41992 2026-11518-1

openSUSE gzip Moderate Threat Advisory CVE-2026-41992 2026-11518-1

Yanac
openSUSE Kubevirt Container Disk Moderate Security Update 2026-11520-1

openSUSE Kubevirt Container Disk Moderate Security Update 2026-11520-1

Yanac
openSUSE open-iscsi Important Local Access Security Update 2026-21580-1

openSUSE open-iscsi Important Local Access Security Update 2026-21580-1

Yanac
openSUSE Leap 16.0 Chromium Important Security Fixes 2026-21581-1

openSUSE Leap 16.0 Chromium Important Security Fixes 2026-21581-1

Yanac
Debian LTS apr-util DLA-4742-1 Denial of Service and Code Execution

Debian LTS apr-util DLA-4742-1 Denial of Service and Code Execution

Yanac
Debian Neutron Important API Permission Issues CVE-2026-55707 DSA-6444-1

Debian Neutron Important API Permission Issues CVE-2026-55707 DSA-6444-1

Yanac

CVE-2026-19992 | Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure

Yanac

CVE-2026-19993 | Webkul Bagisto up to 2.4.4 RMA State Validation update-status behavioral workflow

Yanac

CVE-2026-19994 | Webkul Bagisto up to 2.4.4 Configuration Management execute action authorization

Yanac

CVE-2026-19995 | Webkul Bagisto up to 2.4.4 RMA Message send-message cross site scripting

Yanac

CVE-2026-19996 | Webkul Bagisto up to 2.4.4 Backend Customer Behavior Data Endpoint /admin/customers ID privileges management

Yanac

CVE-2026-19997 | Webkul Bagisto up to 2.4.4 Backend Sales RMA Endpoint requests authorization

Yanac
Take me home!

Follow Us:

Rss Linkedin