Editors' Pick 

EtherRAT Ethereum smart contract C2-vel

Geronimo

A Hunt.io kutatói az EtherRAT néven azonosított távoli hozzáférést biztosító kártevőt elemezték, amely szakít a hagyományos C2-infrastruktúrák használatával, és Ethereum smart contract alkalmaz a

Editors' Pick 

Check Point Security Management Server javítás

Geronimo

A Check Point biztonsági figyelmeztetése szerint egy kritikus hitelesítés-megkerülési sérülékenység érinti a Security Management Server és a Multi-Domain Security Management rendszereket. A CVE-2026-18574 azonosítójú hiba lehetővé teszi,

Editors' Pick 

CrashStealer macOS infostealer 

Geronimo

A Kaspersky a CrashStealer macOS infostealer működését elemezte, amely egy Werkbit nevű videókonferencia-alkalmazásnak álcázza magát, miközben az Apple saját biztonsági mechanizmusait használja fel

Hozzáférés eladó

Geronimo

SonicWall SMA kihasználása

Geronimo

DarkSword iOS exploit

Geronimo

ENISA: Secure by Design and Default Playbook

Geronimo

Rendőrök adatait lopták el

Geronimo

1 800 bitcoint loptak el

Geronimo

Charming Kitten szimulátor

Geronimo

Liechtenstein adatszivárgás

Geronimo

Apple Security Bounty korlátozás

Geronimo

30 minnesotai víziközmű összehangolt kibertámadása

Geronimo

AI worming

Geronimo

Memóriabiztonság szabványosítás

Geronimo

News

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
News 

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Yanac

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is

Microsoft tells engineers to curb their token-burning enthusiasm

Microsoft tells engineers to curb their token-burning enthusiasm

Yanac
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

Yanac
Samsung and Mousterian move ahead with floating datacenter for Texas

Samsung and Mousterian move ahead with floating datacenter for Texas

Yanac
U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

Yanac
Four Top Google A.I. Researchers Form New Start-Up

Four Top Google A.I. Researchers Form New Start-Up

Yanac
CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

Yanac
The Iran off-ramp Trump keeps driving past

The Iran off-ramp Trump keeps driving past

Yanac

Kiberbiztonsági hírek

Vendors' news

Cloudflare OS: an open platform for agents, apps, and work 

Cloudflare OS: an open platform for agents, apps, and work 

Yanac
WriteGuard: fine-grained controls for MCP Servers 

WriteGuard: fine-grained controls for MCP Servers 

Yanac

Shadow AI, Rogue Agents, and Data Leaks: A Special Report on Navigating AI Risk 

Yanac
Catching rogue AI behavior with identity-aware analytics 

Catching rogue AI behavior with identity-aware analytics 

Yanac
How we’re rethinking work at Cloudflare with Cloudflare OS 

How we’re rethinking work at Cloudflare with Cloudflare OS 

Yanac

Life with the Penguin

OpenStack IPA Flaws Highlight a Hidden Bare-Metal Security Risk

OpenStack IPA Flaws Highlight a Hidden Bare-Metal Security Risk

Yanac
AI Is Already Performing Linux Security Work. What Happens When It Escapes Containment?

AI Is Already Performing Linux Security Work. What Happens When It Escapes Containment?

Yanac
What Is Fuzzing? Inside the Search for Hidden Linux Kernel Bugs

What Is Fuzzing? Inside the Search for Hidden Linux Kernel Bugs

Yanac
Responding to a Web Server Compromise

Responding to a Web Server Compromise

Yanac
What Business Owners Need to Know About Linux Security

What Business Owners Need to Know About Linux Security

Yanac

Check this out

Season 4 of The Europol Podcast available now

Season 4 of The Europol Podcast available now

Yanac
Season 4 of The Europol Podcast available now

Season 4 of The Europol Podcast available now

Yanac
Migrant smuggling network using rental cars dismantled across the Balkans

Migrant smuggling network using rental cars dismantled across the Balkans

Yanac
Europol-led action against nihilistic violent extremist network “The Com”

Europol-led action against nihilistic violent extremist network “The Com”

Yanac
Europol-led action against nihilistic violent extremist network “The Com”

Europol-led action against nihilistic violent extremist network “The Com”

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

EtherRAT Ethereum smart contract C2-vel
Editors' Pick

EtherRAT Ethereum smart contract C2-vel

Geronimo
Check Point Security Management Server javítás
Editors' Pick

Check Point Security Management Server javítás

Geronimo
CrashStealer macOS infostealer 
Editors' Pick

CrashStealer macOS infostealer 

Geronimo
Hozzáférés eladó
Editors' Pick

Hozzáférés eladó

Geronimo

IOT

ICS

5G trends

Govee’s New Lights Enchanted My Backyard — Without Needing an Outlet

Govee’s New Lights Enchanted My Backyard — Without Needing an Outlet

Yanac
Back-to-School Is Expensive Enough Already. Here Are the Best Deals to Help With That

Back-to-School Is Expensive Enough Already. Here Are the Best Deals to Help With That

Yanac
FCC Rule Banning Foreign Robots Could Sweep Up New Home Robot Vacuums

FCC Rule Banning Foreign Robots Could Sweep Up New Home Robot Vacuums

Yanac
Most Smart Fitness Devices Lack Essential Data Protection, EFF Warns

Most Smart Fitness Devices Lack Essential Data Protection, EFF Warns

Yanac
Can Smart Home Devices Catch on Fire? I Researched the Facts You Should Know

Can Smart Home Devices Catch on Fire? I Researched the Facts You Should Know

Yanac

Claroty launches public sector subsidiary, advances FedRAMP High authorization for government CPS security

Yanac

Xage expands Critical Asset Protection as AI-driven cyber threats compress vulnerability response timelines

Yanac

ClearVector report finds 91% of production identities are non-human, exposing identity intelligence gap

Yanac

LevelBlue review finds attackers exploited exposed PLCs and remote access to disrupt US water infrastructure

Yanac

TP-Link Omada flaws could allow attackers to infiltrate industrial network infrastructure through zero-touch provisioning

Yanac
6 things you should know about Google’s new selfie sign-in system

6 things you should know about Google’s new selfie sign-in system

Yanac
Surviving AI: Navigating workload creep, AI slop, and the new tech career playbook

Surviving AI: Navigating workload creep, AI slop, and the new tech career playbook

Yanac
‘Apple is one of the greatest companies of all time,’ says OpenAI

‘Apple is one of the greatest companies of all time,’ says OpenAI

Yanac
AI agents get better at IT ops, but only with humans in the loop

AI agents get better at IT ops, but only with humans in the loop

Yanac
Anthropic’s AI models accidentally hacked three companies

Anthropic’s AI models accidentally hacked three companies

Yanac

Vulnerabilities

CVE-2026-16100 | Red Hat Keycloak User-Event Metrics Recording resource consumption

Yanac

CVE-2026-54876 | OpenSSL up to 3.6.3/4.0.1 OCSP Response Checking OCSP_response_get1_basic certs memory leak

Yanac

CVE-2026-16102 | Red Hat Keycloak Dynamic Client Registration privileges management

Yanac

CVE-2026-15573 | Red Hat Keycloak PathMatcher improper authorization

Yanac

CVE-2026-17613 | Penpot up to 2.17.0 Import import-binfile file-id authorization

Yanac

CVE-2026-16071 | Red Hat Keycloak LDAP storage provider access control

Yanac

CVE-2026-12410 | Gen Digital CCleaner 6.36.11508 Uninstaller symlink

Yanac

CVE-2026-16022 | oblique-bit cli up to 15.4.1 Project Creation execSync project-name os command injection

Yanac

CVE-2026-0516 | SonicWall SonicOS HTTP Header Processing neutralization

Yanac

CVE-2026-71259 | ESPHome up to 2026.7.0 URL Validator config_validation.py cv.url input validation

Yanac

CVE-2026-71276 | absmach Magistrala Message Readers transport.go fmt.Sprintf format sql injection

Yanac

CVE-2026-71268 | thiagoralves OpenPLC Structured Text File webserver/openplc.py compile_program file_path path traversal

Yanac

CVE-2026-71226 | Red Hat Enterprise Linux/Kernel libkcapi memory corruption

Yanac

CVE-2026-71262 | IoTSharp BlobStorageController BlobStorageController.cs _blob.WriteFileAsync formFile path traversal

Yanac

CVE-2026-71263 | cwalter-at FreeModbus TCP Port porttcp.c xMBPortTCPPool Length off-by-one

Yanac

CVE-2026-71264 | Aircoookie WLED JSON Configuration Endpoint wled00/wled_server.cpp serveJson improper authentication

Yanac

CVE-2026-71271 | usememos Memos up to 0.29.1 Webhook URL Validation validate.go isReservedIP redirect

Yanac

CVE-2026-71274 | openshwprojects OpenBK7231T_App MQTT Command src/cmnds/cmd_channels.c CHANNEL_SetLabel encoding error

Yanac

CVE-2026-71275 | openshwprojects OpenBK7231T_App OTA Execution http_fns.c http_fn_ota_exec host cross site scripting

Yanac

CVE-2026-71261 | mackron dr_libs W64 CUE Chunk Metadata Parsing dr_wav.h drwav__metadata_process_chunk cuePointCount integer overflow

Yanac

CVE-2026-71270 | Stirling-Tools Stirling-PDF URL PDF Conversion Endpoint ConvertWebsiteToPDF.java server-side request forgery

Yanac
Take me home!

Follow Us:

Rss Linkedin