Editors' Pick 

Spam és phishing jelentés 2025

Geronimo

A Kaspersky 2025-ös spam és phishing jelentése a kéretlen és megtévesztő elektronikus kommunikáció változását ismerteti az elmúlt évben, és milyen veszélyekkel kell számolniuk

Editors' Pick 

RenEngine kampány

Geronimo

A Securelist egy összetett, több összetevős malware-kampányt mutat be, amely legalább három különböző rosszindulatú komponens, a HijackLoader, a LUMMA stealer és az ACR stealer együttese alkotja a

Editors' Pick 

OysterLoader

Geronimo

A SEKOIA.IO az OysterLoader nevű, többfázisú loader malware működését tárja fel, amely az elmúlt időszakban dinamikusan fejlődő elkerülési technikákat vet be a védekezés

Rágalmazó moltbot

Geronimo

Bio-dronok

Geronimo

API-kulcsok szivárgása

Geronimo

VK Styles 

Geronimo

BeyondTrust kihasználhatóság aktív felfderítése

Geronimo

LockBit 5.0 képesslgei

Geronimo

Apple WebKit sérülékenység javítása

Geronimo

CISA éves összefoglaló 2025

Geronimo

Az APT csoportok egyre gyakrabban használják a Gemini-t

TrainedR

WhatsApp blokkolás Oroszországban

TrainedR

ICS Patch Tuesday

Geronimo

Operation Winter SHIELD

Geronimo

News

Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign
News 

Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign

Yanac

Researchers found malicious npm and PyPI packages tied to a fake recruitment campaign linked to North Korea’s Lazarus Group. ReversingLabs

More Than Ever, Videos Expose the Truth. And Cloud It, Too.

More Than Ever, Videos Expose the Truth. And Cloud It, Too.

Yanac
You need to watch the intensely surreal cult classic Possession

You need to watch the intensely surreal cult classic Possession

Yanac

CTM360: Lumma Stealer and Ninja Browser malware campaign abusing Google Groups

Yanac
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

Yanac
I hate my AI pet with every fiber of my being

I hate my AI pet with every fiber of my being

Yanac
Apple’s first-gen AirTags are still worth buying now that they’re $16 apiece

Apple’s first-gen AirTags are still worth buying now that they’re $16 apiece

Yanac
Logitech’s new Superstrike is a faster, more customizable gaming mouse

Logitech’s new Superstrike is a faster, more customizable gaming mouse

Yanac

Kiberbiztonsági hírek

Vendors' news

Understand the Shift Toward AI-Driven Interactions: ​A Guide to MCP 

Yanac
Phishing on the Edge of the Web and Mobile Using QR Codes 

Phishing on the Edge of the Web and Mobile Using QR Codes 

Yanac
Quick digest of Kaspersky’s report “Spam and Phishing in 2025” | Kaspersky official blog 

Quick digest of Kaspersky’s report “Spam and Phishing in 2025” | Kaspersky official blog 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 7 

The Good, the Bad and the Ugly in Cybersecurity – Week 7 

Yanac
Manipulating AI memory for profit: The rise of AI Recommendation Poisoning 

Manipulating AI memory for profit: The rise of AI Recommendation Poisoning 

Yanac

Life with the Penguin

What Is SELinux? A Practical Take for Linux Admins

What Is SELinux? A Practical Take for Linux Admins

Yanac

The foundations of software: open source libraries and their maintainers

Yanac
What Is TLS (Transport Layer Security) in Linux Security?

What Is TLS (Transport Layer Security) in Linux Security?

Yanac

SQL Server 2025 is generally available on Ubuntu 24.04 LTS

Yanac

Hiring the Canonical way: trust, humanity, and remote-first thinking

Yanac

Check this out

Europol signs Working Arrangement with the Argentine Republic

Yanac

24 industrial-scale labs dismantled in the largest-ever operation against synthetic drugs

Yanac

Joint report outlines practical approach to prioritising post-quantum cryptography migration in financial services

Yanac

Europol report: evolving tactics in maritime cocaine trafficking operations

Yanac

Large migrant smuggling operation in Bulgaria leads to 16 arrests

Yanac

CERT news

RT @campuscodi: The Microsoft November 2022 Patch Tuesday updates are out. 68 vulnerabilities fixed. Also, 4 zero-days: -CVE-2022-41128, J…

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

The https://t.co/WLopIGLEjT typosquatting finder service has been updated, multiple bugs were fixed and some improv… https://t.co/kZQxUQqXp1

Yanac

Featured categories

Spam és phishing jelentés 2025
Editors' Pick

Spam és phishing jelentés 2025

Geronimo
RenEngine kampány
Editors' Pick

RenEngine kampány

Geronimo
OysterLoader
Editors' Pick

OysterLoader

Geronimo
Rágalmazó moltbot
Editors' Pick

Rágalmazó moltbot

Geronimo

IOT

ICS

5G trends

27 Pieces of Kitchen Clutter Just Begging to Be Tossed or Donated

27 Pieces of Kitchen Clutter Just Begging to Be Tossed or Donated

Yanac
We Do the Math: How Much Money Can You Save With LED Lights?

We Do the Math: How Much Money Can You Save With LED Lights?

Yanac
Keep It Clean With Over 50% Off Yeedi’s S16 Robot Vacuum and Mop for Presidents Day

Keep It Clean With Over 50% Off Yeedi’s S16 Robot Vacuum and Mop for Presidents Day

Yanac
I Was Shocked to Discover My Home’s Worst ‘Energy Vampire’

I Was Shocked to Discover My Home’s Worst ‘Energy Vampire’

Yanac
Best Apple HomeKit and Siri Devices to Buy in 2026

Best Apple HomeKit and Siri Devices to Buy in 2026

Yanac

Cyolo marks record year as industrial cybersecurity spending shifts to secure remote access

Yanac

CISA updates Brickstorm malware report with new .NET-compiled variant and expanded detection guidance

Yanac

CISA 2025 Year in Review focuses on driving security and resilience across critical infrastructure

Yanac

CISA alerts on OT vulnerabilities after Poland energy attack damaged RTUs and wiped HMI data

Yanac

Why do cybersecurity organizations refuse to identify control system cyber incidents

Yanac
AI will likely shut down critical infrastructure on its own, no attackers required

AI will likely shut down critical infrastructure on its own, no attackers required

Yanac
FTC digs deeper into Microsoft’s bundling and licensing practices

FTC digs deeper into Microsoft’s bundling and licensing practices

Yanac
Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes

Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes

Yanac
February’s Patch Tuesday release fixes 59 flaws, including 6 being exploited

February’s Patch Tuesday release fixes 59 flaws, including 6 being exploited

Yanac
AI introduction can lead to employee burnout

AI introduction can lead to employee burnout

Yanac

Vulnerabilities

CVE-2026-2560 | kalcaddle kodbox up to 1.64.05 Media File Preview Plugin VideoResize.class.php run localFile os command injection

Yanac

CVE-2026-2561 | JingDong JD Cloud Box AX6600 up to 4.5.1.r4533 jdcweb_rpc /jdcapi web_get_ddns_uptime privilege escalation

Yanac

CVE-2026-2562 | JingDong JD Cloud Box AX6600 up to 4.5.1.r4533 jdcweb_rpc /jdcapi cast_streen File privilege escalation

Yanac

CVE-2026-2563 | JingDong JD Cloud Box AX6600 up to 4.5.1.r4533 jdcapp_rpc /f/service/controlDevice set_stcreenen_deabled_status/get_status privilege escalation

Yanac

CVE-2026-2564 | Intelbras VIP 3260 Z IA 2.840.00IB005.0.T /OutsideCmd password recovery

Yanac

CVE-2026-2565 | Wavlink WL-NU516U1 20251208 /cgi-bin/adm.cgi sub_40785C time_zone stack-based overflow

Yanac

CVE-2026-2566 | Wavlink WL-NU516U1 up to 130/260 /cgi-bin/adm.cgi sub_406194 firmware_url stack-based overflow

Yanac

CVE-2026-2567 | Wavlink WL-NU516U1 20251208 /cgi-bin/nas.cgi sub_401218 User1Passwd stack-based overflow

Yanac

CVE-2026-2555 | JeecgBoot 3.9.1 Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization (Issue 9335)

Yanac

CVE-2026-2556 | cskefu up to 8.0.1 Endpoint MediaController.java url server-side request forgery

Yanac

CVE-2026-2557 | cskefu up to 8.0.1 File Upload MediaController.java upload cross site scripting

Yanac

CVE-2026-2558 | GeekAI up to 4.2.4 net_handler.go Download url server-side request forgery (Issue 256)

Yanac

CVE-2026-2542 | Total VPN 0.5.29.0 on Windows win-service.exe unquoted search path

Yanac

CVE-2019-25368 | OPNsense 19.1 diag_backup.php cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25369 | OPNsense 19.1 POST Request system_advanced_sysctl.php tunable cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25370 | OPNsense 19.1 interfaces_vlan_edit.php tag/descr/vlanif cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25372 | OPNsense 19.1 diag_traceroute.php host cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25371 | OPNsense 19.1 POST Request diag_ping.php host cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25374 | OPNsense 19.1 vpn_ipsec_settings.php passthrough_networks cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25373 | OPNsense 19.1 firewall_rules_edit.php Category cross site scripting (Exploit 46351 / EDB-46351)

Yanac

CVE-2019-25377 | OPNsense 19.1 POST Request system_advanced_sysctl.php Value cross site scripting (Exploit 46351 / EDB-46351)

Yanac
Take me home!

Follow Us:

Rss Linkedin