Editors' Pick 

Chrome 156

Geronimo

A Google 2026. október 20-án kiadta a Chrome 156-os verzióját, amely a közzétett beszámolók szerint 353 biztonsági hibát javít. A

Editors' Pick 

PAN-OS: kihasznált GlobalProtect

Geronimo

A Palo Alto Networks Unit 42 október 20-án frissített elemzése szerint több zsarolóvírus-csoport is aktívan kihasználja a PAN-OS operációs rendszer CVE-2026-0257 azonosítójú

Editors' Pick 

Signal: aktív maradhatott a mikrofon

Geronimo

A Signal titkosított üzenetküldő alkalmazás híváskezelő komponensében kritikus sérülékenységet azonosítottak. A CVE-2026-113380 jelű, 9,3-as CVSS-besorolású hiba a RingRTC könyvtár 2.72.0 előtti verzióit

Oracle Patchday

Geronimo

Betiltott DeepSeek

Geronimo

PHP2Shell

Geronimo

Orosz kiberkémek egy hadihajógyártó hálózatában

Geronimo

Célpontban Ukrajna állami adatcsere-rendszere

Geronimo

Bronze Sandcastle kampányok

Geronimo

FortiSIEM: kritikus RCE

Geronimo

Irán háborús kibertevékenysége

Geronimo

Nikkei: egy hónapban három incidens 

Geronimo

ConnectWise: leállított felhőszolgáltatások

Geronimo

Digital forensics gap analysis

Geronimo

Cairn-penelek kihasználása

Geronimo

News

Meta Raises Its A.I. Spending, Even as Cash Pressures Grow
News 

Meta Raises Its A.I. Spending, Even as Cash Pressures Grow

Yanac

The spending is having an effect on the Silicon Valley giant’s cash flow, as Meta continues investing to lead in

Lazarus hackers use post-quantum cryptography for malware delivery

Lazarus hackers use post-quantum cryptography for malware delivery

Yanac
Anthropic Joins the A.I. Agent Race With Claude Duet

Anthropic Joins the A.I. Agent Race With Claude Duet

Yanac
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

Yanac
What 32,000 Folds Did to the iPhone Duo’s Hinge

What 32,000 Folds Did to the iPhone Duo’s Hinge

Yanac
Walmart is inviting AI agents to shop for you

Walmart is inviting AI agents to shop for you

Yanac
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight

OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight

Yanac
Airbnb bans making guests do dishes and take out the trash

Airbnb bans making guests do dishes and take out the trash

Yanac

Kiberbiztonsági hírek

Vendors' news

HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait 

Yanac
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise 

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise 

Yanac

Critical Remote Code Execution Vulnerabilities in PHP Core 

Yanac
PHP2Shell: How to Protect Your Server | Kaspersky official blog 

PHP2Shell: How to Protect Your Server | Kaspersky official blog 

Yanac
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now 

PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now 

Yanac

Life with the Penguin

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

Yanac
Phala Attack Shows What Confidential Computing Does Not Protect

Phala Attack Shows What Confidential Computing Does Not Protect

Yanac
eMudhra CA compromise fixes available

eMudhra CA compromise fixes available

Yanac
AI Code Review Produces 28 Accepted Security Findings in Apache Camel

AI Code Review Produces 28 Accepted Security Findings in Apache Camel

Yanac
Zero-Day Vulnerability Gave Attackers Time to Plant Backdoors

Zero-Day Vulnerability Gave Attackers Time to Plant Backdoors

Yanac

Check this out

BEC protection gap: Why orgs overestimate their protection

BEC protection gap: Why orgs overestimate their protection

Yanac
Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation

Spain, Denmark and the Netherlands win Europol 2026 Excellence Awards in Innovation

Yanac
EU law enforcement chiefs gather to discuss new challenges in EU security

EU law enforcement chiefs gather to discuss new challenges in EU security

Yanac
Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat

Cannabis smuggling from North America and Thailand into Europe: Europol highlights growing threat

Yanac
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Yanac

CERT news

TR-102 Critical Vulnerabilities in PHP (Potentially Exploited) – CVE-2026-109618 and CVE-2026-109619

Yanac
Critical security issue affecting PHP

Critical security issue affecting PHP

Yanac
Seven Core Research Areas for a Rapidly Evolving Cyber Landscape

Seven Core Research Areas for a Rapidly Evolving Cyber Landscape

Yanac

Featured categories

Chrome 156
Editors' Pick

Chrome 156

Geronimo
PAN-OS: kihasznált GlobalProtect
Editors' Pick

PAN-OS: kihasznált GlobalProtect

Geronimo
Signal: aktív maradhatott a mikrofon
Editors' Pick

Signal: aktív maradhatott a mikrofon

Geronimo
Oracle Patchday
Editors' Pick

Oracle Patchday

Geronimo

IOT

ICS

5G trends

Interested in Trying Apple’s HomeView? Make Sure You Buy the Right Model

Interested in Trying Apple’s HomeView? Make Sure You Buy the Right Model

Yanac
What Can a Roborock Robot Vacuum and Mop Do? 5 Common Scenarios, Plus Models to Shop

What Can a Roborock Robot Vacuum and Mop Do? 5 Common Scenarios, Plus Models to Shop

Yanac
Apple’s HomeView Event Left Me With Questions

Apple’s HomeView Event Left Me With Questions

Yanac
I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

Yanac
I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

I’ve Tested Echo Shows and Nest Hubs. Here’s How Apple’s HomeView Display Stacks Up

Yanac
Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities

Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities

Yanac
GAO outlines 2027-2032 agenda for congressional oversight of federal cyber defenses, critical infrastructure, AI risks

GAO outlines 2027-2032 agenda for congressional oversight of federal cyber defenses, critical infrastructure, AI risks

Yanac
Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable OT systems

Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable OT systems

Yanac
Singapore’s CSA and Google identify safeguards and access controls to address autonomous AI agent risks

Singapore’s CSA and Google identify safeguards and access controls to address autonomous AI agent risks

Yanac
Dispel, Tenable integrate OT asset intelligence with zero-trust remote access controls to boost industrial cybersecurity

Dispel, Tenable integrate OT asset intelligence with zero-trust remote access controls to boost industrial cybersecurity

Yanac
The Googlebook work test: Can an Android laptop get the job done?

The Googlebook work test: Can an Android laptop get the job done?

Yanac
Before you automate systems, decide which data wins

Before you automate systems, decide which data wins

Yanac
Remediation in the era of AI: Fix what matters first

Remediation in the era of AI: Fix what matters first

Yanac
AI isn’t hallucinating—but your data might be

AI isn’t hallucinating—but your data might be

Yanac
The Patch Apocalypse is here. Patching everything isn’t the answer.

The Patch Apocalypse is here. Patching everything isn’t the answer.

Yanac

Vulnerabilities

CVE-2026-114493 | LocalAI up to 4.11.0 Gallery core/gallery/gallery.go server-side request forgery

Yanac

CVE-2026-105869 | Apache Pulsar up to 4.0.13/4.2.4 MultiRolesTokenAuthorizationProvider improper authentication

Yanac

CVE-2026-105927 | Apache Pulsar up to 4.0.13/4.2.4 WebSocket service deadLetterTopic privileges management

Yanac

CVE-2026-105930 | Apache Pulsar up to 4.0.13/4.1.3/4.2.4 Pulsar Functions Worker privileges management

Yanac

CVE-2026-112868 | H5P Plugin up to 1.17.9 on WordPress access control

Yanac

CVE-2026-114176 | DigitalME eRoom Plugin up to 1.7.1 on WordPress authorization

Yanac

CVE-2026-105926 | Apache Pulsar up to 4.0.13/4.1.3/4.2.4 Broker improper authorization

Yanac

CVE-2026-114574 | massCodeIO massCode 5.10 Local HTTP Service src/main/api/index.ts information disclosure (Issue 966)

Yanac
Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs

Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs

Yanac

CVE-2026-114129 | uhop stream-json up to 3.6.x FlexAssembler resource consumption

Yanac

CVE-2026-114575 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 product.so UploadCustomModule FileMd5 command injection

Yanac

CVE-2026-114576 | Linksys RE6250 1.0.04.001 Web Management Interface strcmp session_id random values

Yanac

CVE-2026-114577 | oretnom23 php-travel-agency-system Insertion admin/insert.php sql injection

Yanac

CVE-2025-31699 | Apache Traffic Server prior 9.2.16/10.1.5/10.2.1 access control

Yanac

CVE-2025-55702 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 improper synchronization

Yanac

CVE-2026-105944 | Apache Pulsar Manager up to 0.4.0 improper authentication

Yanac

CVE-2026-105936 | Apache Pulsar up to 4.0.13/4.2.4 Functions Connectors Endpoint connectors privileges management

Yanac

CVE-2026-105931 | Apache Pulsar up to 4.0.13/4.2.4 Transaction Administration API /admin/v3/transactions privileges management

Yanac

CVE-2026-105932 | Apache Pulsar up to 4.0.13/4.2.4 Entry Filter Policy entryFilters improper authorization

Yanac

CVE-2026-105933 | Apache Pulsar up to 4.0.13/4.2.4 privileges management

Yanac

CVE-2026-105937 | Apache Pulsar up to 4.0.13/4.2.4 Shadow Topics privileges management

Yanac
Take me home!

Follow Us:

Rss Linkedin