Editors' Pick 

CoSnitch támadási lánc 

Geronimo

A Varonis Threat Labs három sérülékenységből álló, CoSnitch nevű támadási láncot tárt fel a Microsoft Copilot Personalban. A legsúlyosabb, CVE-2026-24301 jelű hiba lehetővé tette, hogy egy

Editors' Pick 

Elfeledett infrastruktúra – lehallgatható katonai vonalak

Geronimo

Egy Lina néven publikáló biztonsági kutató súlyos, elfeledett infrastruktúrahibát talált az ENUM (e164.arpa) telefonhívás-irányítási rendszerben. Három területi zóna – Saint Helena (+290), Diego Garcia/British

Editors' Pick 

Rust supply-chain 

Geronimo

A StepSecurity 2026. augusztus 20-án egy gyorsan végrehajtott Rust supply-chain támadást tárt fel. Egy legitim maintainer kompromittált fiókjából három népszerű crates.io csomag rosszindulatú verzióját

BRIDGEHEAD npm supply-chain 

Geronimo

Cryptographic Context Injection

Geronimo

SPECTRE Kínából

Geronimo

Siemens S7 PLC-k aktív támadása  

Geronimo

AI támogatású pénzügyi támadások

Geronimo

Medusa ransomware

Geronimo

StopAndProtect

Geronimo

Internetről elérhető ICS-ek amerikai adatközpontok közelében

TrainedR

Nyomravezetői díj iráni államhoz köthető hackerekért

Geronimo

PurpleDelta

Geronimo

Operation CameraSwarm

Geronimo

Escape-Time from Sansbox

Geronimo

News

Hundreds of leaked AWS keys give full control over corporate accounts
News 

Hundreds of leaked AWS keys give full control over corporate accounts

Yanac

More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active

Homeland security cybercops say patch TrueConf (Russia’s Zoom) if you’re using it

Homeland security cybercops say patch TrueConf (Russia’s Zoom) if you’re using it

Yanac
SickKids children’s hospital bandages up careers website after intruder breaks in

SickKids children’s hospital bandages up careers website after intruder breaks in

Yanac
Lawmakers seek watchdog review of federal hacking of Americans

Lawmakers seek watchdog review of federal hacking of Americans

Yanac

In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug

Yanac
Apple Pay Supporting U.S. National Park Foundation Over the Next Week

Apple Pay Supporting U.S. National Park Foundation Over the Next Week

Yanac
US Reaper drones near end of the line in a new war era

US Reaper drones near end of the line in a new war era

Yanac
There’s one big reason I’ll choose the Pixel 11 Pro Fold over the Galaxy Z Fold 8

There’s one big reason I’ll choose the Pixel 11 Pro Fold over the Galaxy Z Fold 8

Yanac

Kiberbiztonsági hírek

Vendors' news

100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress Plugin 

100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress Plugin 

Yanac
Malware in car infotainment systems: how infection occurs | Kaspersky official blog 

Malware in car infotainment systems: how infection occurs | Kaspersky official blog 

Yanac
CNCMachineRMS C2 Protocol 

CNCMachineRMS C2 Protocol 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 34 

The Good, the Bad and the Ugly in Cybersecurity – Week 34 

Yanac
The invisible passenger in your car 

The invisible passenger in your car 

Yanac

Life with the Penguin

Linux Security Roundup: Kernel, Redis, and Server Updates to Review This Week

Linux Security Roundup: Kernel, Redis, and Server Updates to Review This Week

Yanac
Linux Kernel BPF Disassembler Out-of-Bounds Access Advisory Alert

Linux Kernel BPF Disassembler Out-of-Bounds Access Advisory Alert

Yanac
XNET Uses XDP Traffic Sampling to Preserve Suricata Visibility at 100 Gbps

XNET Uses XDP Traffic Sampling to Preserve Suricata Visibility at 100 Gbps

Yanac
Linux Security Monitoring, Logging & Detection

Linux Security Monitoring, Logging & Detection

Yanac
Ad Blockers for Linux Browsers in 2026: Privacy, Performance, and Security Considerations

Ad Blockers for Linux Browsers in 2026: Privacy, Performance, and Security Considerations

Yanac

Check this out

Season 4 of The Europol Podcast available now

Season 4 of The Europol Podcast available now

Yanac

1.6 Million Likely Impacted by RingCentral Data Breach

Yanac

Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

Yanac

If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

Yanac
Who’s Tracking You? Use This New Service to Find Out

Who’s Tracking You? Use This New Service to Find Out

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

CoSnitch támadási lánc 
Editors' Pick

CoSnitch támadási lánc 

Geronimo
Elfeledett infrastruktúra – lehallgatható katonai vonalak
Editors' Pick

Elfeledett infrastruktúra – lehallgatható katonai vonalak

Geronimo
Rust supply-chain 
Editors' Pick

Rust supply-chain 

Geronimo
BRIDGEHEAD npm supply-chain 
Editors' Pick

BRIDGEHEAD npm supply-chain 

Geronimo

IOT

ICS

5G trends

I Studied How Home Security Tech Can Help Track Pest Problems

I Studied How Home Security Tech Can Help Track Pest Problems

Yanac
Make Your Home Smarter With 16% Off This Tapo Wi-Fi Power Strip

Make Your Home Smarter With 16% Off This Tapo Wi-Fi Power Strip

Yanac
Brighten Your Room for Less. Govee’s Smart Lamp Hits an All-Time Low

Brighten Your Room for Less. Govee’s Smart Lamp Hits an All-Time Low

Yanac
A New Thermal Add-On to My Phone Changed How I See My Home Forever

A New Thermal Add-On to My Phone Changed How I See My Home Forever

Yanac
Best Smart Home Devices of 2026: Everyday Upgrades

Best Smart Home Devices of 2026: Everyday Upgrades

Yanac

SANS Institute joins OTCC to strengthen critical infrastructure cybersecurity workforce development

Yanac

CyberSheath report finds growing credibility gap in CMMC compliance as contractor confidence falls

Yanac

Lastwall earns CMMC Level 2 certification to strengthen protection of CUI and FCI across US defense supply chain

Yanac

NIST SP 1353 details AI prompts and use cases for Cybersecurity Framework 2.0 analysis, planning and reporting

Yanac

ISASecure and NSA develop HCSA certification scheme for high-criticality operational technology components

Yanac

ChatGPT wants Full Disk Access to your Mac and Messages

Yanac
OpenAI adds an AI safety layer to detect misuse without retaining enterprise data

OpenAI adds an AI safety layer to detect misuse without retaining enterprise data

Yanac
New ‘Slack Code’ turns AI coding into a team activity

New ‘Slack Code’ turns AI coding into a team activity

Yanac
Apple to OpenAI: Go to your room

Apple to OpenAI: Go to your room

Yanac
The Pixel 11 paradox

The Pixel 11 paradox

Yanac

Vulnerabilities

CVE-2026-75928 | Brushfire Online Experience information disclosure

Yanac

CVE-2026-54789 | OpenIDC mod_auth_openidc 2.4.15.2/2.4.16.11 State-Cookie Parser out-of-bounds write

Yanac

CVE-2026-75933 | Jet Admin Sign-in Page cross site scripting

Yanac

CVE-2026-49114 | ONNX up to 1.20.x External Data save_external_data symlink

Yanac

CVE-2026-75932 | Jet Admin improper authentication

Yanac

CVE-2026-22681 | Volcengine OpenViking up to 0.3.3 Resources API Endpoint /api/v1/resources server-side request forgery

Yanac

CVE-2026-77806 | SPIP up to 4.4.20 analyse_resultat_skel Spip-Filtre code injection

Yanac

CVE-2026-15580 | N-able PassPortal Extension 3.29.2 information disclosure

Yanac

CVE-2026-75946 | HP OMEN Gaming Hub 1101.2603 privileges management

Yanac

CVE-2026-47753 | LXC Incus up to 7.0.x Backup backend.go (*backend).CreateInstanceFromBackup null pointer dereference

Yanac

CVE-2026-48749 | LXC Incus up to 7.1.x access control

Yanac

CVE-2026-48750 | LXC Incus up to 7.1.x Exec Endpoint record-output path traversal

Yanac

CVE-2026-77812 | DJI Neo 2 DUML Protocol missing encryption

Yanac

CVE-2026-48752 | LXC Incus up to 7.1.x path traversal

Yanac

CVE-2026-48751 | LXC Incus up to 7.1.x Instance Snapshots os command injection

Yanac

CVE-2026-48753 | LXC Incus up to 7.0.x S3 Protocol Upload Endpoint path traversal

Yanac

CVE-2026-62313 | LXC Incus up to 7.2.x privileges management

Yanac

CVE-2026-48769 | LXC Incus up to 7.1.x Client input validation

Yanac

CVE-2026-62867 | LXC Incus up to 7.2.x Storage Volume Configuration block.create_options argument injection

Yanac

CVE-2026-62940 | lxc Incus up to 7.2.x Migration privileges management

Yanac

CVE-2026-62941 | lxc Incus up to 7.2.x privileges management

Yanac
Take me home!

Follow Us:

Rss Linkedin