Editors' Pick 

Agentic cyber defence felépítése

Geronimo

A brit NCSC új anyaga arra figyelmeztet, hogy az agentic cyber defence nem egyenlő azzal, hogy egy LLM-et hozzákapcsolunk a SOC

Editors' Pick 

Exvicy ClickFix malware framework

Geronimo

A Sekoia kutatói feltárták az Exvicy ClickFix malware-terjesztő keretrendszert, amelyet 2026 májusa óta Malware-as-a-Service szolgáltatásként kínálnak kiberbűnözői fórumokon. A szolgáltatás kompromittált

Editors' Pick 

TASK#STOMP backdoor

Geronimo

A Securonix által feltárt TASK#STOMP egy Windowsos kémkedő backdoor, amely szinte teljes egészében beépített rendszerkomponensekre támaszkodik. A fertőzés egy VBS-szkripttel indul, majd

Active Directory a támadás eszközeként

Geronimo

Kapibala kampány

Geronimo

EU számvevőszéki jelentés

Geronimo

Orosz választás kibertámadásai

Geronimo

Ne bízz a szuperalkalmazásban

Geronimo

KEV: Linux kernel sérülékenységek

Geronimo

Első világháborús kód megfejtése

Geronimo

HEIF Heist kutatás

Geronimo

BragJack böngészőbővítmény kihasználás

Geronimo

Dynamic Incident Response  

Geronimo

GHAPPIER loader

Geronimo

Audit az AI korában

Geronimo

News

Score free Pixel Buds 2A when you preorder a Googlebook at Best Buy
News 

Score free Pixel Buds 2A when you preorder a Googlebook at Best Buy

Yanac

The Android-powered Googlebooks are coming soon, with familiar brands and specs that rival Windows Copilot machines. For anyone eager to

Motorola’s wild-looking Signature 27 runs Qualcomm’s new Extreme chipset

Motorola’s wild-looking Signature 27 runs Qualcomm’s new Extreme chipset

Yanac
Apple clarifies that Texture and Grain controls are exclusive to the latest iPhones’ cameras

Apple clarifies that Texture and Grain controls are exclusive to the latest iPhones’ cameras

Yanac
Saudi Arabia’s new Exobot EVs make the Cybertruck look normal

Saudi Arabia’s new Exobot EVs make the Cybertruck look normal

Yanac
Qualcomm’s Snapdragon 8 Elite Gen 6 comes in an Extreme version too

Qualcomm’s Snapdragon 8 Elite Gen 6 comes in an Extreme version too

Yanac
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Yanac
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Yanac
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Yanac

Kiberbiztonsági hírek

Vendors' news

Phishing Detection Is the Alarm. Threat Intelligence Is Why It Matter 

Phishing Detection Is the Alarm. Threat Intelligence Is Why It Matter 

Yanac
Unmasking EvilTokens: Getting to the root of device code phishing 

Unmasking EvilTokens: Getting to the root of device code phishing 

Yanac

Beyond Identity: Governing the Agentic Enterprise 

Yanac
Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts 

Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts 

Yanac
We just shipped support for the ugliest part of HTTP: Vary 

We just shipped support for the ugliest part of HTTP: Vary 

Yanac

Life with the Penguin

Linux Fixes Input Bugs That Could Leak Kernel Memory

Linux Fixes Input Bugs That Could Leak Kernel Memory

Yanac
Linux Fixes Two Memory Safety Bugs in DMA Cleanup

Linux Fixes Two Memory Safety Bugs in DMA Cleanup

Yanac
crun Tightens GPU Security for Containers Running in MicroVMs

crun Tightens GPU Security for Containers Running in MicroVMs

Yanac
Researchers Show How Prompt Injection Could Expose AWS AgentCore Credentials

Researchers Show How Prompt Injection Could Expose AWS AgentCore Credentials

Yanac
CISA Confirms Active Exploitation of Linux Kernel Crypto Flaw

CISA Confirms Active Exploitation of Linux Kernel Crypto Flaw

Yanac

Check this out

GPT-6 Astra Breaks an Old Enigma Message

Yanac

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

Yanac
Researchers used Claude to hack OpenAI

Researchers used Claude to hack OpenAI

Yanac

WordPress Patches ‘Click2Shell’ Vulnerability

Yanac
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

Agentic cyber defence felépítése
Editors' Pick

Agentic cyber defence felépítése

Geronimo
Exvicy ClickFix malware framework
Editors' Pick

Exvicy ClickFix malware framework

Geronimo
TASK#STOMP backdoor
Editors' Pick

TASK#STOMP backdoor

Geronimo
Active Directory a támadás eszközeként
Editors' Pick

Active Directory a támadás eszközeként

Geronimo

IOT

ICS

5G trends

Abode Home Security Starter Kit: The Speediest Setup I’ve Ever Seen

Abode Home Security Starter Kit: The Speediest Setup I’ve Ever Seen

Yanac
The Magic of AI Greetings and Auto-Messages on Our Video Doorbells

The Magic of AI Greetings and Auto-Messages on Our Video Doorbells

Yanac
This Govee Smart Lamp Doubles as a Speaker and Is Now Down to $135 Ahead of Prime Day

This Govee Smart Lamp Doubles as a Speaker and Is Now Down to $135 Ahead of Prime Day

Yanac
Save $200 on Roborock’s Brand-New Robot Vac and Mop With This Launch Deal

Save $200 on Roborock’s Brand-New Robot Vac and Mop With This Launch Deal

Yanac
Pet Tech Roundup: CNET Pet Owners Found the Best Products

Pet Tech Roundup: CNET Pet Owners Found the Best Products

Yanac
NIST SP 800-82r4 draft expands OT security guidance with zero trust, CSF 2.0, consequence-driven risk management

NIST SP 800-82r4 draft expands OT security guidance with zero trust, CSF 2.0, consequence-driven risk management

Yanac
Colorado water utilities face foreign cyberattacks targeting pumps, alarms and remote access

Colorado water utilities face foreign cyberattacks targeting pumps, alarms and remote access

Yanac

CISA’s Cyber Storm X tests cybersecurity preparedness across transportation, water and wastewater sectors

Yanac
Health Infrastructure Security Act reintroduced to strengthen healthcare cybersecurity standards, resilience and oversight

Health Infrastructure Security Act reintroduced to strengthen healthcare cybersecurity standards, resilience and oversight

Yanac
NIST awards over $1.7 million to expand cybersecurity education and workforce development across eight states

NIST awards over $1.7 million to expand cybersecurity education and workforce development across eight states

Yanac
Gemini broke into 3 companies, but Google kept it quiet because ‘no damage was done’

Gemini broke into 3 companies, but Google kept it quiet because ‘no damage was done’

Yanac
Review: M5 Ultra Mac Studio: Pure, unadulterated power

Review: M5 Ultra Mac Studio: Pure, unadulterated power

Yanac
5 internet-improving Chrome extensions worth trying on Android

5 internet-improving Chrome extensions worth trying on Android

Yanac
Beware these fake websites selling subscriptions to AI assistants

Beware these fake websites selling subscriptions to AI assistants

Yanac
California joins US states clamping down on data center gold rush

California joins US states clamping down on data center gold rush

Yanac

Vulnerabilities

CVE-2026-95958 | JusticeRage Manalyze 1.0.0 PE Parser manape/pe.cpp PE::_parse_relocations BlockSize integer underflow

Yanac

CVE-2026-77274 | Sooperset Mcp Atlassian up to 0.21.x URL Validation validate_url_for_ssrf server-side request forgery

Yanac

CVE-2026-43642 | Softaculous Virtualizor up to 3.2.8 Billing unserialize act/from_billing_module/billing_data deserialization (Patch 9)

Yanac

CVE-2026-43641 | Softaculous Virtualizor up to 3.2.8 Billing proc_open uid os command injection

Yanac

CVE-2026-77251 | sooperset mcp-atlassian up to 0.21.x Jira Search/Confluence Search/Board APIs privileges management

Yanac

CVE-2026-43643 | Softaculous Virtualizor up to 3.2.8 Billing act/from_billing_module/uid/balance/billing_data authorization

Yanac

CVE-2026-11389 | RTI Connext Professional up to 7.3.1.5/7.7.0.0 Core Libraries out-of-bounds

Yanac

CVE-2026-18458 | RTI Connext Professional up to 7.7.0.0/7.3.1.5/6.1.x Core Libraries type confusion

Yanac

CVE-2026-77244 | sooperset Mcp Atlassian up to 0.21.x HTTP Transport improper authentication

Yanac

CVE-2026-18462 | RTI Connext Professional Core Libraries integer overflow

Yanac

CVE-2026-77267 | sooperset mcp-atlassian up to 0.21.x Authentication Header Processing _process_authentication_headers X-Atlassian-Jira-Url/X-Atlassian-Confluence-Url server-side request forgery

Yanac

CVE-2026-77252 | sooperset mcp-atlassian up to 0.21.x Search Filter SearchMixin.search_issues/SearchMixin.search projects_filter/spaces_filter privileges management

Yanac

CVE-2026-11388 | RTI Connext Professional prior 7.3.1.6/7.7.0.1 Core Libraries double free

Yanac

CVE-2026-18457 | RTI Connext Professional up to 7.7.0.0 heap-based overflow

Yanac

CVE-2026-18459 | RTI Connext Professional Core Libraries calculation

Yanac

CVE-2026-18460 | RTI Connext Professional up to 7.3.1.5/7.7.0.0 Core Libraries off-by-one

Yanac

CVE-2026-18461 | RTI Connext Professional 7.3.0.10/7.5.0 Core Libraries format string

Yanac

CVE-2026-18626 | RTI Connext Professional Core Libraries out-of-bounds

Yanac

CVE-2026-77265 | sooperset mcp-atlassian up to 0.21.x validate_url_for_ssrf X-Atlassian-Jira-Url/X-Atlassian-Confluence-Url server-side request forgery

Yanac

CVE-2026-7866 | RTI Connext Professional Core Libraries stack-based overflow

Yanac

CVE-2026-77270 | sooperset mcp-atlassian up to 0.21.x Attachment Upload file_path path traversal

Yanac
Take me home!

Follow Us:

Rss Linkedin