Editors' Pick 

Ausztrália 2025–2026-os kiberfenyegetési jelentése

Geronimo

Az Australian Signals Directorate (ASD) közzétett éves kiberfenyegetési jelentése szerint tovább nőtt az Ausztráliát érő kibertámadások száma és összetettsége. Az

Editors' Pick 

Norvégia: magas nemzeti kiberkockázat

Geronimo

A norvég Nemzetbiztonsági Hatóság 2026. október 27-én magasra emelte az ország kiberkockázati szintjét, és azonnali megelőző intézkedésekre szólította fel a köz- és

Editors' Pick 

CISA 2030

Geronimo

Az amerikai Kiberbiztonsági és Infrastruktúra-biztonsági Ügynökség bemutatta CISA 2030: Defend, Harden, Prevail című stratégiáját. A stratégia a kritikus infrastruktúrák célzottabb védelmét, a

FortiBleed 2.0

Geronimo

Starlink felhasználók megfigyelése

Geronimo

NIST IR 8547 – PQC átállás

Geronimo

SkyW4lker

Geronimo

Kali Linux 2026.3

Geronimo

Apple frissítések

Geronimo

CISA SCuBA

Geronimo

AuthMask

Geronimo

Microsoft Teams – visszaélés a külső csevegési funkcióval

Geronimo

Jelentősen nőhet az AI-vel támogatott ipari kibertámadások veszélye

Geronimo

OpenSSL 4.1: gyorsabb posztkvantum-kriptográfia

Geronimo

Google-technológiára épülhet a német hírszerzési felhő

Geronimo

News

Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
News 

Bluesky Is Blocking Links to a Major Leak of DHS Employee Records

Yanac

Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers

Anduril now says its BlueChip laptop will meet Buy American standards at launch

Anduril now says its BlueChip laptop will meet Buy American standards at launch

Yanac
Google struggling to make AI Mode searches pay

Google struggling to make AI Mode searches pay

Yanac

XML Signature Wrapping authentication bypass in Moldova’s MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077)

Yanac
Officials seize domain of top bulletproof hosting provider Virtualine

Officials seize domain of top bulletproof hosting provider Virtualine

Yanac
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice

Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice

Yanac
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook

Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook

Yanac
Here’s Everything Apple Announced This Week

Here’s Everything Apple Announced This Week

Yanac

Kiberbiztonsági hírek

Vendors' news

PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most 

PHP2Shell Update: Still No Confirmed WordPress Compromises, and Answers to the Questions We’re Hearing Most 

Yanac
The CISO’s evolving role: Protecting and defending in the agentic era 

The CISO’s evolving role: Protecting and defending in the agentic era 

Yanac
Unwrapping Retail Peak Season Cyber Threats 

Unwrapping Retail Peak Season Cyber Threats 

Yanac

Frontier AI–Accelerated Attacks: Securing the Agentic Web and MCP Surface 

Yanac

When APIs Meet Machine-Speed Attacks: Lessons from CERT-In 

Yanac

Life with the Penguin

MCP Security Flaw in Google Toolbox Could Expose Server Files

MCP Security Flaw in Google Toolbox Could Expose Server Files

Yanac
Godot Vulnerability Could Let a Language File Run Code in a Game

Godot Vulnerability Could Let a Language File Run Code in a Game

Yanac
AI Alignment Failed When an Agent Targeted an Open-Source Project

AI Alignment Failed When an Agent Targeted an Open-Source Project

Yanac
Kali Linux 2026.3 Release (Build-Scripts Refresh)

Kali Linux 2026.3 Release (Build-Scripts Refresh)

Yanac
How to Plan Linux Log Management for Incident Response

How to Plan Linux Log Management for Incident Response

Yanac

Check this out

5th EMPACT Hackathon leads to the detection of 51 potential victims

5th EMPACT Hackathon leads to the detection of 51 potential victims

Yanac
27 arrests and 248 potential victims identified in action week against labour exploitation

27 arrests and 248 potential victims identified in action week against labour exploitation

Yanac
27 arrests and 248 potential victims identified in action week against labour exploitation

27 arrests and 248 potential victims identified in action week against labour exploitation

Yanac
5th EMPACT Hackathon leads to the detection of 51 potential victims

5th EMPACT Hackathon leads to the detection of 51 potential victims

Yanac
BEC protection gap: Why orgs overestimate their protection

BEC protection gap: Why orgs overestimate their protection

Yanac

CERT news

Vulnerability in Wing FTP Server software

Vulnerability in Wing FTP Server software

Yanac
Podatność w oprogramowaniu Wing FTP Server

Podatność w oprogramowaniu Wing FTP Server

Yanac
Vulnerability in KGS Software tia Viewer software

Vulnerability in KGS Software tia Viewer software

Yanac

Featured categories

Ausztrália 2025–2026-os kiberfenyegetési jelentése
Editors' Pick

Ausztrália 2025–2026-os kiberfenyegetési jelentése

Geronimo
Norvégia: magas nemzeti kiberkockázat
Editors' Pick

Norvégia: magas nemzeti kiberkockázat

Geronimo
CISA 2030
Editors' Pick

CISA 2030

Geronimo
FortiBleed 2.0
Editors' Pick

FortiBleed 2.0

Geronimo

IOT

ICS

5G trends

Amazon’s $500 Echo Show 16 Wants to Be the Center of Your Home

Amazon’s $500 Echo Show 16 Wants to Be the Center of Your Home

Yanac
The Latest Echo Smart Speakers Double as Nanny Cams and Wi-Fi Extenders

The Latest Echo Smart Speakers Double as Nanny Cams and Wi-Fi Extenders

Yanac
Amazon’s New Echo Lineup Goes in the Opposite Direction of Apple HomeView

Amazon’s New Echo Lineup Goes in the Opposite Direction of Apple HomeView

Yanac
Amazon Launches a Digital Picture Frame. It’s Both Clever and Classy

Amazon Launches a Digital Picture Frame. It’s Both Clever and Classy

Yanac
Amazon’s New Alarm Clock ‘Knows’ When You’re in a Deep Sleep and Won’t Wake You

Amazon’s New Alarm Clock ‘Knows’ When You’re in a Deep Sleep and Won’t Wake You

Yanac

Jelentősen nőhet az AI-vel támogatott ipari kibertámadások veszélye

Geronimo
Schneider Electric, NVIDIA, HPE introduce edge AI agents for industrial monitoring, cybersecurity and energy optimization

Schneider Electric, NVIDIA, HPE introduce edge AI agents for industrial monitoring, cybersecurity and energy optimization

Yanac
ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security

ENISA links SBOM automation, integrity safeguards and lifecycle management to software supply chain security

Yanac
OT-ISAC tracks 2026 Asia-Pacific cybersecurity policy shifts affecting critical infrastructure, OT and industrial operations

OT-ISAC tracks 2026 Asia-Pacific cybersecurity policy shifts affecting critical infrastructure, OT and industrial operations

Yanac
Critical PHP vulnerabilities raise worldwide concerns as government websites go offline, researchers report AI-assisted attacks

Critical PHP vulnerabilities raise worldwide concerns as government websites go offline, researchers report AI-assisted attacks

Yanac
The case for a full-circle Googlebook future

The case for a full-circle Googlebook future

Yanac
Apple updates iMac, MacBook Pro, and Creator Studio

Apple updates iMac, MacBook Pro, and Creator Studio

Yanac
It costs a lot more to use AI models in some languages

It costs a lot more to use AI models in some languages

Yanac
Otter adds ‘Work’ mode to automate more meeting-related tasks

Otter adds ‘Work’ mode to automate more meeting-related tasks

Yanac
Opera launches local browser AI, testing enterprise privacy and AI PC strategies

Opera launches local browser AI, testing enterprise privacy and AI PC strategies

Yanac

Vulnerabilities

CVE-2026-118426 | Octopus Deploy Octopus Server up to 2026.2.13486/2026.3.15908 LDAP Authentication privileges management

Yanac

CVE-2026-40063 | Frangoteam 1.3.2-2809 Scripts /nodered/fuxa/scripts information disclosure

Yanac

CVE-2026-42922 | Frangoteam FUXA 1.3.2-2809 nodered authorization

Yanac

CVE-2026-42949 | Frangoteam Fuxa 1.3.2-2809 HTTP /api/runscript runScript authorization

Yanac

CVE-2026-93757 | Wild Apricot Login Plugin up to 1.0.18 on WordPress SSO Authentication Module.php syncWaContact improper authentication (EUVD-2026-112591)

Yanac

CVE-2026-96228 | sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress Login final_login_ajax_action sslcare_login_phone/cap_data improper authentication (EUVD-2026-112590)

Yanac

CVE-2026-109516 | guruteam Bot for Telegram Plugin up to 1.3.0 on WordPress REST Endpoint main bftow_get_user_system_id tgId improper authentication (EUVD-2026-112584)

Yanac

CVE-2026-93855 | brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress Shortcode subscriberid sql injection (EUVD-2026-112587)

Yanac

CVE-2026-96741 | mlfactory DSGVO All in one for WP Plugin up to 5.0 on WordPress Comment Content cross site scripting (EUVD-2026-112585)

Yanac

CVE-2026-93904 | dejanmarkovic Social Web Suite Plugin up to 4.1.12 on WordPress exclude_posts sql injection (EUVD-2026-112588)

Yanac

CVE-2026-96669 | wpscripts Food Store Plugin up to 1.5.5 on WordPress Cookie service_type/type cross site scripting (EUVD-2026-112586)

Yanac

CVE-2026-96666 | Schema App Structured Data Plugin up to 2.3.2 on WordPress Remove Microdata Output Filter cross site scripting (EUVD-2026-112589)

Yanac

CVE-2026-114173 | Canva Ortto Plugin up to 1.0.24 information disclosure

Yanac

CVE-2026-66090 | Apereo openEQUELLA up to 2026.0 XML parser /api/item server-side request forgery

Yanac

CVE-2026-113387 | Canva Ortto Plugin up to 1.0.24 improper authentication

Yanac

CVE-2026-66089 | Apereo openEQUELLA up to 2026.0 SOAP API server-side request forgery

Yanac

CVE-2026-113409 | Canva Ortto Plugin up to 1.0.24 cross site scripting

Yanac

CVE-2026-16889 | Apereo openEQUELLA up to 2026.0 Image Upload Endpoint image name cross site scripting

Yanac

CVE-2026-66091 | Apereo openEQUELLA up to 2026.0 userinfobackup uniqueId authorization

Yanac

CVE-2026-66088 | Apereo openEQUELLA up to 2026.0 Scripting Engine system.execute os command injection

Yanac

CVE-2026-66092 | Apereo openEQUELLA up to 2026.1 Pre-Login Notice /api/preloginnotice cross site scripting

Yanac
Take me home!

Follow Us:

Rss Linkedin