Editors' Pick 

DAEMON Tools szoftver fertőzés

Geronimo

A Kaspersky Securelist elemzése szerint a Daemon Tools eset egy klasszikus ellátási lánc  kompromittáció, ahol a támadók a legitim szoftverterjesztési folyamatot fertőzték meg. A

Editors' Pick 

ScarCruft kapány a játékosok ellen

Geronimo

Az ESET kutatása szerint a ScarCruft (APT37) kampány egy célzott, többplatformos ellátási lánc kompromittáció, amely a dél-koreai felhasználók körében népszerű játékplatformot érintett. A támadás a

Editors' Pick 

Code of conduct phishing

Geronimo

A Microsoft kutatása egy kifinomult, többfázisú phishing kampányt mutat be, amely magatartási kódex témájú csalikra épül, és végül AiTM alapú token-lopáshoz vezet. A támadás

Amazon SES kihasználás

Geronimo

Fosztogatás a Microsoft Copilot mélyén

Geronimo

MOVEit Automation sérülékenyégek

Geronimo

Quasar Linux – QLNX

Geronimo

Bluekit PhaaS

Geronimo

Protokollok posztkvantum-biztonságának vizsgálata 

Geronimo

OpenEMR sérülékenységei

Geronimo

Sérülékenység javítási hullám

Geronimo

Wireshark javítások

Geronimo

Trellix incidens

Geronimo

Linux Copy Fail sérülékenység

Geronimo

Délkelet-Ázsia kormányzati komplex támadási lánca

Geronimo

News

News 

AWS lets agents drive its virtual cloudy desktops – which could cost 500,00 tokens per click

Yanac

Vendor benchmark finds APIs let you do the job faster and cheaper Amazon Web Services has let AI agents loose

China’s J-35AE for Pakistan risks nuclear escalation with India

China’s J-35AE for Pakistan risks nuclear escalation with India

Yanac
Transforming public services through data

Transforming public services through data

Yanac

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls

Yanac

Your job search is getting riskier, says LinkedIn – 9 ways to tell real listings from scams

Yanac
Trump’s leaky Hormuz blockade needs Malacca control to work

Trump’s leaky Hormuz blockade needs Malacca control to work

Yanac

All Linux gamers should take the latest Bazzite release seriously – here’s why

Yanac

India orders infosec red alert in case Mythos sparks crime spree

Yanac

Kiberbiztonsági hírek

Vendors' news

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years 

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years 

Yanac

InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise 

Yanac
The Dangerous Momentum of Autodownload Phishing 

The Dangerous Momentum of Autodownload Phishing 

Yanac

How Akamai’s Zero Trust Framework Meets Critical U.S. Government Mandates 

Yanac
Attackers Actively Exploiting Critical Vulnerability in Breeze Cache Plugin 

Attackers Actively Exploiting Critical Vulnerability in Breeze Cache Plugin 

Yanac

Life with the Penguin

Your Linux Logs Probably Arent Catching Attacks: 2026 Detection Gaps

Your Linux Logs Probably Arent Catching Attacks: 2026 Detection Gaps

Yanac
Control Panel Authentication Failures Expose Entire Linux Servers

Control Panel Authentication Failures Expose Entire Linux Servers

Yanac
How to use Ubuntu on Windows

How to use Ubuntu on Windows

Yanac
Seccomp, AppArmor, SELinux: Where Linux Security Controls Fall Short

Seccomp, AppArmor, SELinux: Where Linux Security Controls Fall Short

Yanac
Ubuntu Copy Fail High Local Privilege Escalation Threat Advisory 2026-31431

Ubuntu Copy Fail High Local Privilege Escalation Threat Advisory 2026-31431

Yanac

Check this out

Europol announces transition arrangements following the departure of Executive Director Catherine De Bolle

Yanac

“Terrorgram” network dealt another blow as member sentenced in Denmark

Yanac

Call centres dismantled and ten arrested in EUR 50 million online fraud case

Yanac

OTF GRIMM one-year anniversary: violence-as-a-service targets published on EU Most Wanted

Yanac

Europol supports hit against ‘Black Axe’ criminal organisation in Switzerland: 10 arrests

Yanac

CERT news

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

Featured categories

DAEMON Tools szoftver fertőzés
Editors' Pick

DAEMON Tools szoftver fertőzés

Geronimo
ScarCruft kapány a játékosok ellen
Editors' Pick

ScarCruft kapány a játékosok ellen

Geronimo
Code of conduct phishing
Editors' Pick

Code of conduct phishing

Geronimo
Amazon SES kihasználás
Editors' Pick

Amazon SES kihasználás

Geronimo

IOT

ICS

5G trends

Airseekers Tron SE Robot Mowers Deliver Ultimate Lawn Care

Airseekers Tron SE Robot Mowers Deliver Ultimate Lawn Care

Yanac
The Best Smart Home and Security Gifts for Mother’s Day

The Best Smart Home and Security Gifts for Mother’s Day

Yanac
Ring’s New Video Doorbell Is the Most Powerful I’ve Seen, But It Tries to Do Too Much

Ring’s New Video Doorbell Is the Most Powerful I’ve Seen, But It Tries to Do Too Much

Yanac
The Best Way to Install Your New Video Doorbell

The Best Way to Install Your New Video Doorbell

Yanac
Tested: 4 Security Cameras With the Best Battery Life Possible

Tested: 4 Security Cameras With the Best Battery Life Possible

Yanac

Fortinet flags ‘industrial scale’ cybercrime scale driven by continuous, machine-speed attacks and automated exploitation

Yanac

Cisco moves to acquire Astrix Security to strengthen control over AI agents, API keys, and service account risks

Yanac

SANS, SERC introduce ICS456 training program to accelerate cybersecurity skills and critical infrastructure protection

Yanac

Proofpoint’s 2026 report exposes disconnect between rapid AI rollout and weak security assurance

Yanac

BeyondTrust brings Identity Security Insights to India, Australia as non-human identity and AI risks accelerate

Yanac
Edge browser leaves passwords exposed in plain text, says researcher

Edge browser leaves passwords exposed in plain text, says researcher

Yanac
Ask Jeeves bites the dust

Ask Jeeves bites the dust

Yanac
Apple can’t make chips fast enough, but that’s only part of the story

Apple can’t make chips fast enough, but that’s only part of the story

Yanac
Microsoft, Google push AI agent governance into enterprise IT mainstream

Microsoft, Google push AI agent governance into enterprise IT mainstream

Yanac
AI-led job cuts don’t always mean stronger ROI — Gartner

AI-led job cuts don’t always mean stronger ROI — Gartner

Yanac

Vulnerabilities

Fedora 44 pdns Critical DoS Issues Advisory FEDORA-2026-f416c4ba87

Fedora 44 pdns Critical DoS Issues Advisory FEDORA-2026-f416c4ba87

Yanac
Fedora 44 Squid Security Advisory 2026-c0590bd498 CVE-2026-33526 DoS Issues

Fedora 44 Squid Security Advisory 2026-c0590bd498 CVE-2026-33526 DoS Issues

Yanac
Fedora 44 pyOpenSSL Important X509Name Field Fix CVE-2026-40475

Fedora 44 pyOpenSSL Important X509Name Field Fix CVE-2026-40475

Yanac

CVE-2026-40075 | OpenMRS up to 2.7.8/2.8.5 ModuleResourcesServlet moduleResources getFile path traversal (GHSA-jjgj-cx3q-pw4w / EUVD-2026-27508)

Yanac

CVE-2026-40110 | jupyter-server jupyter_server up to 2.17.0 Jupyter Server API re.match regular expression without anchors (GHSA-24qx-w28j-9m6p / EUVD-2026-27510)

Yanac

CVE-2026-3208 | mercadopago Mercado Pago payments for WooCommerce Plugin up to 8.7.11 on WordPress WooCommerce API Endpoint mp_pix_image authorization

Yanac

CVE-2026-5753 | servmask All-in-One WP Migration Unlimited Extension Plugin Backup Filename Ai1wmve_Schedules_Controller authorization

Yanac

CVE-2026-39402 | lxc up to 6.x find_line authorization (GHSA-3m9j-g9gc-vcvq / EUVD-2026-27497)

Yanac

CVE-2026-39849 | pi-hole FTL up to 6.6.0 Configuration API /etc/pihole/pihole.toml crlf injection (GHSA-9cqv-839p-gpq2 / EUVD-2026-27498)

Yanac

CVE-2026-41950 | langgenius dify up to 1.13.x authorization (EUVD-2026-27504)

Yanac

CVE-2026-40068 | Anthropic claude-code up to 2.1.83 claude/settings.json command injection (GHSA-q5hj-mxqh-vv77 / EUVD-2026-27502)

Yanac

CVE-2026-7573 | Velocidex Velociraptor up to 0.76.4 RPC API Endpoint authorization

Yanac

CVE-2026-39383 | Gotenberg up to 8.30.x URL FilterDeadline Gotenberg-Webhook-Url server-side request forgery (GHSA-5vh4-rgv7-p9g4)

Yanac

CVE-2026-35579 | coredns TSIG-gated Plugin up to 1.14.2 dns.TsigVerify MAC improper authentication (GHSA-vp29-5652-4fw9)

Yanac

CVE-2026-40934 | jupyter-server jupyter_server up to 2.17.x Password Change jupyter_cookie_secret session expiration (GHSA-5mrq-x3x5-8v8f)

Yanac

CVE-2025-71251 | Unisoc T8300 IMS denial of service

Yanac

CVE-2025-71252 | Unisoc T8300 Modem IMS denial of service

Yanac

CVE-2025-71253 | Unisoc T8300 Modem IMS denial of service

Yanac
openSUSE Tumbleweed curl 8.20.0 Moderate Security Update 10674-1

openSUSE Tumbleweed curl 8.20.0 Moderate Security Update 10674-1

Yanac
openSUSE Tumbleweed Security Notification Prometheus CVE-2026-42155 Info

openSUSE Tumbleweed Security Notification Prometheus CVE-2026-42155 Info

Yanac
Debian 11 PyJWT Critical Header Parameter Issue DLA-4564-1 CVE-2026-32597

Debian 11 PyJWT Critical Header Parameter Issue DLA-4564-1 CVE-2026-32597

Yanac
Take me home!

Follow Us:

Rss Linkedin