Editors' Pick 

InvisibleFerret kampány

Geronimo

A Trend Micro elemzése szerint az észak-koreai kötődésű Void Dokkaebi – Famous Chollima – jelentősen továbbfejlesztette InvisibleFerret malware-kampányát, amely mára klasszikus pszichológai megtévesztési műveletből önterjedő ellátási

Editors' Pick 

ROADtools

Geronimo

A Palo Alto Networks Unit 42 elemzése szerint a ROADtools mára az egyik legfontosabb, legitim célokra fejlesztett, de támadók által

Editors' Pick 

Cloud Atlas aktivitás

Geronimo

A Kaspersky elemzése szerint a Cloud Atlas APT-csoport 2025 második felében és 2026 elején is aktív maradt, elsősorban orosz és belarusz

CISA KEV űrlap

Geronimo

Megalodon kampány – GitHub backdoor

Geronimo

Microsoft Defender zero-day 

Geronimo

Cisco Secure Workload sérülékenység

Geronimo

SEO poisoning kampányok

Geronimo

Showboat Linux malware 

Geronimo

Platformszintű token-visszavonás

Geronimo

Kimwolf botnet-operátor letartóztatása

Geronimo

Flipper One 

Geronimo

Operation Dragon Whistle 

Geronimo

Iránhoz köthető támadások Amerikában

Geronimo

ExifTool sérülékenység 

Geronimo

News

CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack
News 

CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack

Yanac

Attackers began exploiting Drupal SQL injection flaw CVE-2026-9082 within 48 hours of patch release. Drupal issued a highly critical security

Azov’s drones return to Mariupol as Ukraine expands its kill zone

Azov’s drones return to Mariupol as Ukraine expands its kill zone

Yanac
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Yanac
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

Yanac

I test robot vacuums for a living, and these are the best Memorial Day deals right now

Yanac
The man behind the legendary MPC, Roger Linn, stays focused with a single browser tab

The man behind the legendary MPC, Roger Linn, stays focused with a single browser tab

Yanac
Why pure extortion is replacing traditional ransomware

Why pure extortion is replacing traditional ransomware

Yanac

Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes

Yanac

Kiberbiztonsági hírek

Vendors' news

Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware 

Yanac
From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence 

From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence 

Yanac
Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms 

Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms 

Yanac
With AI and quantum, a young innovator takes on the global water crisis 

With AI and quantum, a young innovator takes on the global water crisis 

Yanac
Breaking down the new Qualcomm chip vulnerability | Kaspersky official blog 

Breaking down the new Qualcomm chip vulnerability | Kaspersky official blog 

Yanac

Life with the Penguin

Decoding design: How design and engineering thrive together in open source

Decoding design: How design and engineering thrive together in open source

Yanac
Developing web apps with local LLM inference

Developing web apps with local LLM inference

Yanac

PinTheft Linux kernel vulnerability mitigation

Yanac

Canonical announces fully Managed Kubeflow AI operations platform on the Microsoft Azure Marketplace

Yanac
A look into Ubuntu Core 26: Cloud-powered edge computing with AWS IoT Greengrass and Azure IoT Edge

A look into Ubuntu Core 26: Cloud-powered edge computing with AWS IoT Greengrass and Azure IoT Edge

Yanac

Check this out

Europol’s Project A.S.S.E.T. identifies millions in criminal assets

Yanac

New Europe-wide campaign targets fugitives sentenced to years behind bars

Yanac

Cybercriminal VPN used by ransomware actors dismantled in global crackdown

Yanac

Two dangerous fugitives arrested in Türkiye and Spain

Yanac

Europol supports international hit against counterfeit medicines and supplements network

Yanac

CERT news

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

Featured categories

InvisibleFerret kampány
Editors' Pick

InvisibleFerret kampány

Geronimo
ROADtools
Editors' Pick

ROADtools

Geronimo
Cloud Atlas aktivitás
Editors' Pick

Cloud Atlas aktivitás

Geronimo
CISA KEV űrlap
Editors' Pick

CISA KEV űrlap

Geronimo

IOT

ICS

5G trends

I’m Finally Ready to Upgrade My Smart Home Devices Thanks to This Ecobee Memorial Day Sale

I’m Finally Ready to Upgrade My Smart Home Devices Thanks to This Ecobee Memorial Day Sale

Yanac
Best Memorial Day Smart Home Deals: Save Big on Home Upgrades

Best Memorial Day Smart Home Deals: Save Big on Home Upgrades

Yanac
Best Outdoor Smart Plugs for 2026: Ready for Any Weather

Best Outdoor Smart Plugs for 2026: Ready for Any Weather

Yanac
I Tested 4 Smart Bird Feeders. This One Stood Out From the Flock

I Tested 4 Smart Bird Feeders. This One Stood Out From the Flock

Yanac
If You’re Looking to Buy a Smart Bird Feeder, Don’t Make My Mistake

If You’re Looking to Buy a Smart Bird Feeder, Don’t Make My Mistake

Yanac

Germany becomes focal point of escalating DACH cyber campaign amid ransomware, geopolitical attacks

Yanac

Iranian state-sponsored hackers exploit Microsoft Exchange, Fortinet flaws to access US infrastructure networks, CRS finds

Yanac

Weak authentication, exposed ICS environments heighten concerns over Iranian cyber intrusions into US critical infrastructure

Yanac

Iránhoz köthető támadások Amerikában

Geronimo

Microsoft dismantles Fox Tempest cybercrime platform tied to ransomware attacks on hospitals, critical organizations

Yanac
Police take down VPN service (this time with a good reason)

Police take down VPN service (this time with a good reason)

Yanac
Meta says goodbye to those who won’t use AI

Meta says goodbye to those who won’t use AI

Yanac
FBI warns of Kali Oauth stealers

FBI warns of Kali Oauth stealers

Yanac
Microsoft says it’s making AI ‘safe for work’ in your browser

Microsoft says it’s making AI ‘safe for work’ in your browser

Yanac
Microsoft, EY to spend $1 billion on helping customers buy agentic AI

Microsoft, EY to spend $1 billion on helping customers buy agentic AI

Yanac

Vulnerabilities

CVE-2026-9376 | JPress up to 1.0.3 UCenter Article Submission Endpoint doWriteSave id/userId improper authorization (Issue 194)

Yanac

CVE-2026-9377 | SourceCodester SUP Online Shopping 1.0 /admin/productedit.php productName cross site scripting

Yanac

CVE-2026-9378 | Edimax BR-6675nD 1.12 POST Request /goform/formHwSet command injection

Yanac

CVE-2026-9379 | Edimax BR-6675nD 1.12 POST Request /goform/formWpsStart pinCode command injection

Yanac

CVE-2026-9380 | Edimax BR-6675nD 1.12 POST Request /goform/formL2TPSetup L2TPUserName buffer overflow

Yanac

CVE-2026-9381 | Edimax BR-6675nD 1.12 POST Request /goform/formPPPoESetup pppUserName buffer overflow

Yanac

CVE-2026-9382 | Edimax BR-6675nD 1.12 POST Request /goform/formPPTPSetup pptpUserName buffer overflow

Yanac

CVE-2026-9383 | itsourcecode Electronic Judging System 1.0 /intrams/admin/login.php Username sql injection

Yanac

CVE-2026-9384 | Totolink A8000RU 7.1cu.643_b20200521 Web Management Interface /cgi-bin/cstecgi.cgi setDiagnosisCfg ip os command injection

Yanac

CVE-2026-9385 | Totolink A8000RU 7.1cu.643_b20200521 Web Management Interface /cgi-bin/cstecgi.cgi setTracerouteCfg command os command injection

Yanac

CVE-2026-9386 | Totolink A8000RU 7.1cu.643_b20200521 Web Management Interface /cgi-bin/cstecgi.cgi setLanguageCfg lang os command injection

Yanac

CVE-2026-9387 | Totolink A8000RU 7.1cu.643_b20200521 Web Management Interface /cgi-bin/cstecgi.cgi setUpgradeFW resetFlags os command injection

Yanac

CVE-2026-9388 | Totolink A8000RU 7.1cu.643_b20200521 Web Management Interface /cgi-bin/cstecgi.cgi setScheduleCfg mode os command injection

Yanac

CVE-2026-9389 | Tenda F456 1.0.0.5 /goform/L7Im frmL7ImForm page buffer overflow

Yanac

CVE-2026-9371 | ItzCrazyKns Vane up to 1.12.1 API route.ts missing authentication (1122/1123)

Yanac

CVE-2026-43503 | Linux Kernel up to 7.0.9 net skb_try_coalesce infinite loop (EUVD-2026-31536)

Yanac

CVE-2026-9372 | ItzCrazyKns Vane up to 1.12.1 Model Provider API route.ts baseURL server-side request forgery (Issue 1124)

Yanac

CVE-2026-9373 | JeecgBoot 3.9.1 OpenAPI Endpoint /openapi/call/ improper authentication

Yanac

CVE-2026-9374 | yangzongzhuan RuoYi-Vue up to 3.9.2 Common Upload Endpoint /common/upload FileUploadUtils.upload unrestricted upload

Yanac

CVE-2026-9366 | NousResearch hermes-agent 2026.4.23 agent/prompt_builder.py _scan_context_content injection

Yanac

CVE-2026-9367 | NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63 terminal_tool tools/approval.py detect_dangerous_command os command injection

Yanac
Take me home!

Follow Us:

Rss Linkedin