Editors' Pick 

WordPress Core kihasználás

Geronimo

A CVE-2026-87902 a WordPress Core súlyos, hitelesítés nélkül kihasználható sérülékenysége, amely a 4.7.0–7.1.1 verziókat érinti. A hiba a page-template feloldásában található: egy támadó manipulált pagename értékkel

Editors' Pick 

SalesBleed támadási lánc

Geronimo

A Zenity Labs SalesBleed néven mutatott be egy támadási láncot a Salesforce Agentforce ellen, amellyel egy külső támadó bejelentkezés és felhasználói kattintás nélkül tudott

Editors' Pick 

Operation Master

Geronimo

A SOCRadar Threat Research Unit az Operation Master néven egy teljes, több lépcsős kiberbűnözői infrastruktúrát tárt fel, amely a hálózati behatolástól az

Felhasználók visszaazonosítása

Geronimo

Kereskedők kihasználása

Geronimo

Storm-2570 ransomware-affiliate

Geronimo

n0n ramsomware

Geronimo

Elemzésálló malware

Geronimo

Tűz egy Starlink földi állomáson

Geronimo

Max Messenger vizsgálata

Geronimo

Legacy rendszerek védelme – csere nélkül

Geronimo

Microsoft regionális adattárolás

Geronimo

Thales 2026 Data Threat Report 

Geronimo

PamStealer macOS infostealer

Geronimo

Ingyenes Claude Max – phishing

Geronimo

News

Citrix admins warned to shut down NetScalers over 2 exploited zero-days
News 

Citrix admins warned to shut down NetScalers over 2 exploited zero-days

Yanac

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity agencies, security researchers, and IT providers

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116

Yanac
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1

Yanac
Amazon Just Knocked $900 Off Apple’s Latest 16-Inch MacBook Pro

Amazon Just Knocked $900 Off Apple’s Latest 16-Inch MacBook Pro

Yanac
Cloudflare fixes Containers cross-tenant flaw exposing customer data

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Yanac
Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

Yanac
Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION

Yanac
Bill Gates says unchecked AI could ‘cause a billion deaths’ in call for regulation

Bill Gates says unchecked AI could ‘cause a billion deaths’ in call for regulation

Yanac

Kiberbiztonsági hírek

Vendors' news

Cloudflare’s 2026 Annual Founders’ Letter 

Cloudflare’s 2026 Annual Founders’ Letter 

Yanac
AI Agents Can Be Secured. We Can Do It. 

AI Agents Can Be Secured. We Can Do It. 

Yanac
3 Consulting Myths Debunked by Unit 42 Experts 

3 Consulting Myths Debunked by Unit 42 Experts 

Yanac
Wordfence Bug Bounty Program Monthly Report – June 2026 

Wordfence Bug Bounty Program Monthly Report – June 2026 

Yanac
Storm-3168: Agentic-driven cloud attacks using compromised service principals 

Storm-3168: Agentic-driven cloud attacks using compromised service principals 

Yanac

Life with the Penguin

A Linux eBPF Trampoline Can Outlive the Program It Calls

A Linux eBPF Trampoline Can Outlive the Program It Calls

Yanac
Why an Unlocked ext4 Buffer Can Restore Stale Directory Data

Why an Unlocked ext4 Buffer Can Restore Stale Directory Data

Yanac
USB/IP Teardown Race Can Rearm a Freed Linux Kernel Timer

USB/IP Teardown Race Can Rearm a Freed Linux Kernel Timer

Yanac
Linux ext4 Patch Blocks an Out-of-Bounds Read From Damaged Metadata

Linux ext4 Patch Blocks an Out-of-Bounds Read From Damaged Metadata

Yanac
Linux Patch Management For Enterprises: A Complete Guide

Linux Patch Management For Enterprises: A Complete Guide

Yanac

Check this out

Protecting citizens, preserving rights

Protecting citizens, preserving rights

Yanac
Six arrests for smuggling migrants via Schengen airports

Six arrests for smuggling migrants via Schengen airports

Yanac

GPT-6 Astra Breaks an Old Enigma Message

Yanac

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

Yanac
Researchers used Claude to hack OpenAI

Researchers used Claude to hack OpenAI

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

WordPress Core kihasználás
Editors' Pick

WordPress Core kihasználás

Geronimo
SalesBleed támadási lánc
Editors' Pick

SalesBleed támadási lánc

Geronimo
Operation Master
Editors' Pick

Operation Master

Geronimo
Felhasználók visszaazonosítása
Editors' Pick

Felhasználók visszaazonosítása

Geronimo

IOT

ICS

5G trends

Amazon Deals of the Day: Take Control of Your Home Temp With Almost 30% Off the Amazon Smart Thermostat

Amazon Deals of the Day: Take Control of Your Home Temp With Almost 30% Off the Amazon Smart Thermostat

Yanac
Smart Home Gift Buying Guide 2026: Upgrades Everyone Will Love

Smart Home Gift Buying Guide 2026: Upgrades Everyone Will Love

Yanac
Some of Samsung’s AI Fridges Became Giant, Cool Bricks After Bad Update

Some of Samsung’s AI Fridges Became Giant, Cool Bricks After Bad Update

Yanac
This AI Hub Wants to Run Your Whole Smart Home at Half Price

This AI Hub Wants to Run Your Whole Smart Home at Half Price

Yanac
Abode Home Security Starter Kit: The Speediest Setup I’ve Ever Seen

Abode Home Security Starter Kit: The Speediest Setup I’ve Ever Seen

Yanac
Optigo Networks launches AI Assistant to address building automation network expertise gap

Optigo Networks launches AI Assistant to address building automation network expertise gap

Yanac

Cloud Range introduces AI Readiness Framework to validate AI agents before operational deployment

Yanac
Ridge Security warns of high-severity TDengine vulnerability that can disrupt industrial telemetry and monitoring

Ridge Security warns of high-severity TDengine vulnerability that can disrupt industrial telemetry and monitoring

Yanac
CISA launches CVE Quality Era framework to improve vulnerability data quality, infrastructure, program governance

CISA launches CVE Quality Era framework to improve vulnerability data quality, infrastructure, program governance

Yanac

Non-routable protocols must be addressed

Yanac
Adobe’s next platform for Creative Cloud? Your AI assistant

Adobe’s next platform for Creative Cloud? Your AI assistant

Yanac
Microsoft’s new Copilot ‘super app’ unifies chat, code, agents

Microsoft’s new Copilot ‘super app’ unifies chat, code, agents

Yanac
Google is set to launch a small AI data center into space

Google is set to launch a small AI data center into space

Yanac
OpenAI wants you to use AI — but not to train its AI

OpenAI wants you to use AI — but not to train its AI

Yanac
AI tools help hacker break in for $25 per target

AI tools help hacker break in for $25 per target

Yanac

Vulnerabilities

CVE-2026-101041 | vulnerability-lookup up to 6.2.0 Account Recovery website/models/user.py toctou

Yanac

CVE-2026-101052 | refly-ai refly up to 1.1.0 JWT Token app.config.ts hard-coded credentials

Yanac

CVE-2026-88772 | Citrix NetScaler ADC/NetScaler Gateway code injection

Yanac

CVE-2026-88771 | Citrix ADC/Gateway up to 13.1-64.22 input validation

Yanac

CVE-2026-88773 | Citrix NetScaler ADC/NetScaler Gateway input validation

Yanac

CVE-2026-88774 | Citrix ADC/Gateway Feature Policy privileges management

Yanac

CVE-2026-101053 | Thinkware U3000 up to 1.02.04 TCP Service /tmp/wpa_supplicant.conf PUT_FILE path access control

Yanac

CVE-2026-101054 | Thinkware U3000 up to 1.02.04 TCP Service /tmp/wpa_supplicant.conf get_file access control

Yanac

CVE-2026-101055 | Thinkware U3000 up to 1.02.04 TCP Service GET_STATUS wifi_info information disclosure

Yanac

CVE-2026-101033 | TomBursch KitchenOwl up to 0.7.10 Expense/Item Operations category_id privileges management

Yanac

CVE-2026-101032 | denisidoro navi up to 2.24.0 os command injection

Yanac

CVE-2026-101035 | aligungr UERANSIM up to 3.3.0 nr-gnb src/lib/nas/encode.cpp DecodePlainMmMessage uncaught exception

Yanac

CVE-2026-101036 | FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1 createParsedTrack.ts path.join path traversal

Yanac

CVE-2026-101037 | FAST FAC1200R 5.0_20201119_1.0.2 devdiscover Service parse_advertisement_frame stack-based overflow

Yanac

CVE-2026-101038 | FAST FAC1200R 5.0_20201119_1.0.2 MmtAtePrase Parser stack-based overflow

Yanac

CVE-2026-101039 | FAST FAC1900R 20190827_2.0.2 devdiscover Service copy_msg_element stack-based overflow

Yanac

CVE-2026-101040 | Ricoh SP 330DN/SP 221/SP C252SF//Aficio SP 3500SF up to 20260813 HTTP Multipart Form-Data Parser denial of service

Yanac

CVE-2026-101014 | Trusted Domain Project OpenDMARC up to 1.4.2 DMARC Record Parser opendmarc_util.c opendmarc_util_cleanup off-by-one (ID 188)

Yanac

CVE-2026-101015 | Trusted Domain Project OpenDMARC up to 1.4.2 policy.c improper validation of unsafe equivalence in input

Yanac

CVE-2026-101016 | Trusted Domain Project OpenDMARC up to 1.4.2 opendmarc_policy.c opendmarc_policy_parse_dmarc fo/rf/ri/pct/sp/adkim/aspf/rua/ruf exceptional condition

Yanac

CVE-2026-101017 | Trusted Domain Project OpenDMARC up to 1.4.2 opendmarc_policy.c strcasecmp exceptional condition

Yanac
Take me home!

Follow Us:

Rss Linkedin