Editors' Pick 

Greyvibe 

Geronimo

A WithSecure kutatása egy új, GREYVIBE néven követett, orosz kötődésű fenyegető csoportot mutat be, amely Ukrajnát célzó műveleteiben szisztematikusan alkalmaz generatív AI-eszközöket.

Editors' Pick 

Google AI Threat Defense  

Geronimo

A Google Cloud bemutatta a Google AI Threat Defense platformot, amelynek célja az AI-alapú támadások elleni, részben autonóm kiberbiztonsági védelem kialakítása. A

Editors' Pick SeConSys 

ENISA NIS360 jelentés

Geronimo

Az ENISA NIS360 jelentése szerint az EU kritikus infrastruktúra-szektorainak kiberbiztonsági érettsége összességében javul, elsősorban a NIS2 irányelv implementációja, a növekvő

ASocks botnet felszámolása

Geronimo

Reservation Hijack

Geronimo

The Gentlemen RaaS elemzése

Geronimo

Sapphire Sleet macOS kampány

Geronimo

Mégsem veszi el az AI a munkánkat?

TrainedR

Kínai térfigyelő kamerák Csehországban

TrainedR

Egyesült Királyság nemzetbiztonsági és kiberbiztonsági környezete

Geronimo

Globális smishing infrastruktúra

Geronimo

Zero Trust megvalósítási irányelvei

Geronimo

FIFA világbajnoksággal kapcsolatos hamis weboldalak

Geronimo

EvidenceForge framework

Geronimo

CISA kihasznált fejlesztői környezetek

Geronimo

News

News 

Exploit Code Published for Critical Flowise RCE Vulnerability

Yanac

The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing a malicious

Russian Spies Are Aggressively Seeking Western Technology as Sanctions Bite, Officials Say

Yanac
Some of our favorite art TVs are more than 40 percent off this weekend

Some of our favorite art TVs are more than 40 percent off this weekend

Yanac
Microsoft is threatening legal action for disclosing exploits

Microsoft is threatening legal action for disclosing exploits

Yanac
Welcome to Night Vale host Cecil Baldwin shares his tech pet peeves

Welcome to Night Vale host Cecil Baldwin shares his tech pet peeves

Yanac
Taiwan’s more relaxed than most of us about Trumpian deal-making

Taiwan’s more relaxed than most of us about Trumpian deal-making

Yanac
The Arduboy FX-C is an excellent time killer you might forget you’re carrying

The Arduboy FX-C is an excellent time killer you might forget you’re carrying

Yanac
Pebblebee’s Halo watches my back and my belongings

Pebblebee’s Halo watches my back and my belongings

Yanac

Kiberbiztonsági hírek

Vendors' news

Malicious npm packages abuse dependency confusion to profile developer environments 

Malicious npm packages abuse dependency confusion to profile developer environments 

Yanac
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection 

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection 

Yanac
Wordfence Bug Bounty Program Monthly Report – March 2026 

Wordfence Bug Bounty Program Monthly Report – March 2026 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 22 

The Good, the Bad and the Ugly in Cybersecurity – Week 22 

Yanac
How fake Android IPTV apps are stealing users’ money and data | Kaspersky official blog 

How fake Android IPTV apps are stealing users’ money and data | Kaspersky official blog 

Yanac

Life with the Penguin

PinTheft Linux kernel vulnerability mitigation

Yanac

Canonical announces optimized Ubuntu images for TPU virtual machines by Google Cloud

Yanac
VMware hypervisor deployment using MAAS

VMware hypervisor deployment using MAAS

Yanac
Introducing Workshop: launch sandboxed development environments on Ubuntu with a single command

Introducing Workshop: launch sandboxed development environments on Ubuntu with a single command

Yanac
Decoding design: How design and engineering thrive together in open source

Decoding design: How design and engineering thrive together in open source

Yanac

Check this out

Operation against criminal network smuggling migrants between Algeria and Spain: nine arrests

Yanac

Smashing Security podcast #469: What your Oura ring won’t tell you

Yanac

‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems

Yanac

The Credential Crisis: How Stolen Credentials Defeat Modern Security

Yanac

Lastwall Raises $11.5 Million for Quantum-Resilient Identity Platform

Yanac

CERT news

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

Featured categories

Greyvibe 
Editors' Pick

Greyvibe 

Geronimo
Google AI Threat Defense  
Editors' Pick

Google AI Threat Defense  

Geronimo
ENISA NIS360 jelentés
Editors' PickSeConSys

ENISA NIS360 jelentés

Geronimo
ASocks botnet felszámolása
Editors' Pick

ASocks botnet felszámolása

Geronimo

IOT

ICS

5G trends

How to Return Smart Home Devices to the Store or Seller

How to Return Smart Home Devices to the Store or Seller

Yanac
Best Tower Fans for 2026: We Tested 14 Fans to Help You Keep Cool This Summer

Best Tower Fans for 2026: We Tested 14 Fans to Help You Keep Cool This Summer

Yanac
9 Security Tips and Devices for Anyone Living Solo

9 Security Tips and Devices for Anyone Living Solo

Yanac
More Swim, Less Scrub: Save $191 on One of Our Favorite Robot Pool Cleaners

More Swim, Less Scrub: Save $191 on One of Our Favorite Robot Pool Cleaners

Yanac
Your Front Door Could Get Smarter for a Lot Less With These Ring Deals

Your Front Door Could Get Smarter for a Lot Less With These Ring Deals

Yanac

SANS finds funding gaps and staffing shortages are slowing government cybersecurity modernization

Yanac

Darktrace identifies rising cyber exposure tied to AI-driven manufacturing operations

Yanac

Gambit links Iran-linked Black Shadow group to destructive cyber campaign targeting US, Middle East organizations

Yanac

Dispel Compliance launches to automate OT audit readiness and reduce industrial compliance costs

Yanac

Claroty launches Claire, a CPS-native AI security agent designed to protect mission-critical infrastructure

Yanac
Meta considers becoming a hyperscaler

Meta considers becoming a hyperscaler

Yanac
AI hiring monoculture is delivering racial bias at scale

AI hiring monoculture is delivering racial bias at scale

Yanac

Open source Euro-Office productivity suite to launch June 9

Yanac
WWDC, Apple, and AI: Waiting for the gift

WWDC, Apple, and AI: Waiting for the gift

Yanac
Certifiably random: Swiss researchers claim perfect random number source

Certifiably random: Swiss researchers claim perfect random number source

Yanac

Vulnerabilities

CVE-2026-10171 | code-projects Online Music Site 1.0 AdminUpdateAlbum.php ID sql injection

Yanac

CVE-2026-7465 | brainstormforce Spectra Gutenberg Blocks Plugin up to 2.19.25 on WordPress call_user_func render_callback privileges management

Yanac

CVE-2026-7459 | eskapism Simple History Plugin up to 5.26.0 on WordPress Reaction Endpoint react_to_event password recovery

Yanac

CVE-2026-9757 | ninjew GEO my WP Plugin up to 4.5.5 on WordPress Shortcode QUERY_STRING sql injection

Yanac

CVE-2026-10172 | Bdtask Multi-Store Inventory Management System 1.0 Component Module.php upload module unrestricted upload

Yanac

CVE-2026-10173 | Orthanc Explorer 2 up to 1.12.0 URL StudyList.vue remote-source cross site scripting (Issue 108)

Yanac

CVE-2026-5071 | zephyrproject-rtos Zephyr up to 4.3 socketcan_frame out-of-bounds (GHSA-c3w6-x7m3-3c58)

Yanac

CVE-2026-10167 | OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 MY_Controller Login.php sign_auth_cookie role improper authentication

Yanac

CVE-2026-10168 | OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 Parents.php marks param1 resource injection

Yanac

CVE-2026-10169 | OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 Forgot Password Endpoint Login.php ajax_forgot_password email password recovery

Yanac

CVE-2026-10170 | code-projects Visitor Management System 1.0 /vms/php/phone_0.php phone sql injection

Yanac

CVE-2026-45741 | Gotenberg server-side request forgery

Yanac

CVE-2026-47212 | Symfony Twilio SMS Notifier signature verification

Yanac

CVE-2026-47213 | BoxLite Timeout denial of service

Yanac

CVE-2026-47392 | MervinPraison PraisonAI execute_code sandbox

Yanac

CVE-2026-47393 | MervinPraison PraisonAI up to 4.6.37 Flask Server missing authentication

Yanac

CVE-2026-47394 | MervinPraison PraisonAI up to 4.6.37 workflow.show/workflow.validate/deploy.validate path traversal

Yanac

CVE-2026-47416 | praisonai-platform Workspace Member members privileges management

Yanac

CVE-2026-10152 | TaleLin lin-cms-spring-boot up to 0.2.1 book Endpoint BookController.java access control (Issue 336)

Yanac

CVE-2026-10153 | westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab AbstractCacheManager.java search s cross site scripting (IJKWOH)

Yanac

CVE-2026-10154 | Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2 messaging.php ID authorization

Yanac
Take me home!

Follow Us:

Rss Linkedin