Editors' Pick 

Gremlin Stealer fejlődése

Geronimo

A Palo Alto Networks Unit 42 kutatása szerint a Gremlin Stealer rövid idő alatt egyszerű credential stealerként működő malware-ből komplex,

Editors' Pick 

FDMTP backdoor

Geronimo

A Darktrace kutatása szerint egy kínai kötődésű APT-kampány – amelyet mérsékelt bizonyossággal a Twill Typhoonhoz, a Mustang Pandahoz kötnek – 2025 szeptembere

Editors' Pick ICS 

Sandworm ipari környezeti működése

Geronimo

A Nozomi Networks elemzése szerint a Sandworm – APT44, Seashell Blizzard, Voodoo Bear – továbbra is az egyik legveszélyesebb állami hátterű fenyegető szereplő az ipari és

BlackFile vishing zsarolási műveletei

Geronimo

FamousSparrow APT aktvitása

Geronimo

TencShell malware

Geronimo

Zero Trust alapelvek alkalmazása OT környezetekben

TrainedR

Észtország: Átfogó kiberbiztonság, felkészültség és versenyképesség

TrainedR

Közösségi média használat tiltása a tinédzsereknek Európában

TrainedR

AI-alapú kibertámadási képességek fejlődése 

Geronimo

Gamaredon aktivitás

Geronimo

Gemstuffer malware 

Geronimo

Fragnesia Linux kernel sérülékenység

Geronimo

TeamPCP ellátási lánc támadásai

Geronimo

The Gentlemen szivárgás

Geronimo

News

From indemnity to indispensability: China’s 125-year reversal
News 

From indemnity to indispensability: China’s 125-year reversal

Yanac

When eight foreign flags flew over Beijing in August 1900, no one in the Forbidden City could have imagined that

America’s Taiwan gap utterly exposed at Trump-Xi summit

America’s Taiwan gap utterly exposed at Trump-Xi summit

Yanac
Like Suez for the Brits, Hormuz spells doom for US empire

Like Suez for the Brits, Hormuz spells doom for US empire

Yanac
Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable’

Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable’

Yanac
Surprise AI bills leave AWS and Google Cloud users aghast

Surprise AI bills leave AWS and Google Cloud users aghast

Yanac

New Windows ‘MiniPlasma’ zero-day exploit gives SYSTEM access, PoC released

Yanac

Closing the Gap: The Regulatory and Structural Maturation of Digital Assets

Yanac
Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93

Peter G. Neumann, Who Warned of Computer Security Risks, Dies at 93

Yanac

Kiberbiztonsági hírek

Vendors' news

Living Off the Pipeline: Defending Against CI/CD Subversion 

Living Off the Pipeline: Defending Against CI/CD Subversion 

Yanac

Mini Shai-Hulud: The Worm Returns and Goes Public 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 20 

The Good, the Bad and the Ugly in Cybersecurity – Week 20 

Yanac

Legacy Out of Contract 

Yanac
Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files 

Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files 

Yanac

Life with the Penguin

Finding the blind spot: How Canonical hunts logic flaws with AI

Yanac
Linux Security Monitoring Challenges and EDR Visibility Gaps

Linux Security Monitoring Challenges and EDR Visibility Gaps

Yanac

Fragnesia Linux kernel local privilege escalation vulnerability mitigations

Yanac
Linux Kernel Fragnesia Critical Privilege Escalation CVE-2026-46300

Linux Kernel Fragnesia Critical Privilege Escalation CVE-2026-46300

Yanac
Why Red Hats krb5 Update Matters for Linux and Windows Authentication 

Why Red Hats krb5 Update Matters for Linux and Windows Authentication 

Yanac

Check this out

Swedish fugitive arrested as new OTF GRIMM targets added to EU Most Wanted

Yanac

EU Most Wanted platform helps locate Hungarian child abuser hiding in Spain

Yanac

Atlantic ‘Cocaine Highway’ broken in coordinated maritime operation

Yanac

Europol announces transition arrangements following the departure of Executive Director Catherine De Bolle

Yanac

“Terrorgram” network dealt another blow as member sentenced in Denmark

Yanac

CERT news

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

Featured categories

Gremlin Stealer fejlődése
Editors' Pick

Gremlin Stealer fejlődése

Geronimo
FDMTP backdoor
Editors' Pick

FDMTP backdoor

Geronimo
Sandworm ipari környezeti működése
Editors' PickICS

Sandworm ipari környezeti működése

Geronimo
BlackFile vishing zsarolási műveletei
Editors' Pick

BlackFile vishing zsarolási műveletei

Geronimo

IOT

ICS

5G trends

Best Smoke Detectors and Dual Alarms for 2026: Lab Tested

Best Smoke Detectors and Dual Alarms for 2026: Lab Tested

Yanac
Govee’s Garden Lights Hit $95, Their Best Amazon Price Yet

Govee’s Garden Lights Hit $95, Their Best Amazon Price Yet

Yanac
Best Smart Home Devices of 2026: Upgrades for Every Room

Best Smart Home Devices of 2026: Upgrades for Every Room

Yanac
Best Home Pet Cameras of 2026: Remote Check-In and Much More

Best Home Pet Cameras of 2026: Remote Check-In and Much More

Yanac
Ring Brings Its Retinal 2K Resolution to Spotlight and Floodlight Cameras

Ring Brings Its Retinal 2K Resolution to Spotlight and Floodlight Cameras

Yanac

Sandworm ipari környezeti működése

Geronimo

CMU’s Electrotech Moneyball paper warns China-linked AI, grid technologies threaten US energy infrastructure security

Yanac

Twill Typhoon used legitimate Windows tools, DLL sideloading, FDMTP backdoor in APAC espionage campaign

Yanac

NIST advances nine post-quantum signature algorithms as race to secure data from quantum attacks intensifies

Yanac

NCC Group warns ransomware attacks on OT-heavy industrial environments are intensifying amid IT/OT convergence

Yanac
For May, Patch Tuesday means 139 updates — but no zero-days

For May, Patch Tuesday means 139 updates — but no zero-days

Yanac
Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes

Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes

Yanac
Why Apple needs Intel — and America needs them both

Why Apple needs Intel — and America needs them both

Yanac
Here’s one career emerging from the AI shift: ‘forward-deployed engineers’

Here’s one career emerging from the AI shift: ‘forward-deployed engineers’

Yanac
Windows 11 Insider Previews: What’s in the latest build?

Windows 11 Insider Previews: What’s in the latest build?

Yanac

Vulnerabilities

CVE-2026-8507 | JONASBN Crypt::OpenSSL::PKCS12 up to 1.94 on Perl info/info_as_hash out-of-bounds write (ID 55)

Yanac

CVE-2026-8721 | JONASBN Crypt::OpenSSL::PKCS12 up to 1.94 on Perl strlen null termination

Yanac

CVE-2026-46720 | RRWO Net::Statsd::Tiny up to 0.3.7 on Perl crlf injection

Yanac

CVE-2018-25326 | wp-google-drive Google Drive Plugin 2.2 on WordPress Configuration File gdrive-ajaxs.php file_name path traversal (Exploit 44435 / EDB-44435)

Yanac

CVE-2018-25324 | Simple-Fields Simple Fields Plugin up to 0.2/0.3.5/5.3.4 on WordPress simple_fields.php wp_abspath filename control (Exploit 44425 / EDB-44425)

Yanac

CVE-2018-25329 | wp-with-spritz WP with Spritz Plugin 1.0 on WordPress System Configuration wp.spritz.content.filter.php url filename control (Exploit 44544 / EDB-44544)

Yanac

CVE-2018-25335 | peugeot-music-plugin Peugeot Music Plugin 1.0 on WordPress upload.php Name missing authentication (Exploit 44737 / EDB-44737)

Yanac

CVE-2018-25325 | woocommerce-csvimport WooCommerce CSV-Importer 3.3.6 delete_export_file filename path traversal (Exploit 44433 / EDB-44433)

Yanac

CVE-2018-25333 | nordex-online N149 Wind Turbine Web Server up to 4.5 POST login.php Login sql injection (Exploit 44684 / EDB-44684)

Yanac

CVE-2018-25319 | wende60 MyEvents Addon 2.2.1 on Redaxo GET Request event_add.php myevents_id sql injection (Exploit 44261 / EDB-44261)

Yanac

CVE-2018-25331 | Zenar Content Management System 7.0 ajax.php current_page cross site scripting (Exploit 44664 / EDB-44664)

Yanac

CVE-2018-25320 | ACL Analytics up to 13.0.0.579 Powershell Script EXECUTE code injection (Exploit 44281 / EDB-44281)

Yanac

CVE-2018-25332 | GitBucket 4.23.1 JAR missing authentication (Exploit 44668 / EDB-44668)

Yanac

CVE-2018-25339 | Bylancer Zechat 1.5 v sql injection (Exploit 44685 / EDB-44685)

Yanac

CVE-2018-25338 | Bylancer Zechat 1.5 hashtag sql injection (Exploit 44685 / EDB-44685)

Yanac

CVE-2018-25327 | Joomsky JS Jobs 1.2.0 on Joomla Setting cross-site request forgery (Exploit 44492 / EDB-44492)

Yanac

CVE-2018-25330 | Joomlaextensions EkRishta 2.10 on Joomla Setting user_setting phone_no sql injection (Exploit 44660 / EDB-44660)

Yanac

CVE-2018-25323 | Alloksoft Allok AVI DivX MPEG to DVD Converter 2.6.1217 buffer overflow (Exploit 44363 / EDB-44363)

Yanac

CVE-2018-25336 | Joomlaextensions jCart for OpenCart 2.3.0.2 on Joomla Account Information cross-site request forgery (Exploit 44788 / EDB-44788)

Yanac

CVE-2018-25337 | Joomlaextensions JoomOCShop 1.0 on Joomla User Information edit cross-site request forgery (Exploit 44789 / EDB-44789)

Yanac

CVE-2018-25321 | TP-Link TL-WR720NMbps Wireless N Router 1_130719 Setting VirtualServerRpm.htm cross-site request forgery (Exploit 44335 / EDB-44335)

Yanac
Take me home!

Follow Us:

Rss Linkedin