Editors' Pick 

Kína AI használata autonóm támadásokhoz

Geronimo

A Unit 42 kutatói egy kínai nyelvű fenyegető szereplő által végrehajtott, nagyrészt autonóm AI-alapú kibertámadási kampányt azonosítottak, amelyben a mesterséges intelligencia nem

Editors' Pick Uncategorized 

CaptiveCrunch kampány

Geronimo

A Microsoft Threat Intelligence kutatói egy új, CaptiveCrunch néven követett kiberkémkedési kampányt azonosítottak, amelyet a Storm-2945, a Midnight Blizzard (APT29/NOBELIUM) orosz állami hátterű csoport egyik alklasztere

Editors' Pick ICS 

PLC-k kihasználására hívja fel a figyelmet a CISA

Geronimo

A CISA sürgős figyelmeztetést adott ki az amerikai víz- és szennyvízágazat számára, miután jelentősen megnőtt az internetre közvetlenül csatlakozó programozható logikai vezérlők (PLC-k) elleni

PolinRider kampány

Geronimo

Észak-koreai hackerek eszközöket adnak át ransomware csoportoknak

TrainedR

Gyakorlati útmutató a KKV-k számára a Secure by Design és Default alapelveiről

TrainedR

EU szankciók csalóközpontok ellen

Geronimo

Anthropics Claude sebezhetőséget fedezett fel egy kriptoalgoritmusban

Geronimo

GenieLocker ransomware

Geronimo

Cisco Secure Firewall Management Center kihasználás

Geronimo

Tajvan AI cyber shield 

Geronimo

USAREUR-AF 2026 Cyber Summit 

Geronimo

OpenAI–Hugging Face incidens

Geronimo

Kiberbiztonsági auditok felfüggesztése

Geronimo

Ransomware Románia büntetés-végrehajtásánál

Geronimo

News

Spider-Man: Brand New Day leak racks up millions of views
News 

Spider-Man: Brand New Day leak racks up millions of views

Yanac

A bootleg of Spider-Man: Brand New Day was up on X for over seven hours before eventually being pulled. During

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

Yanac
Trump blames Tim Walz for water hacks even though it’s probably Iran

Trump blames Tim Walz for water hacks even though it’s probably Iran

Yanac
Apple Watch Series 11 GPS Models Available From $299.99 on Amazon

Apple Watch Series 11 GPS Models Available From $299.99 on Amazon

Yanac
The Verge’s 2026 back-to-school shopping guide

The Verge’s 2026 back-to-school shopping guide

Yanac
Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Yanac
Rails patches critical Active Storage flaw with RCE potential

Rails patches critical Active Storage flaw with RCE potential

Yanac
Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Yanac

Kiberbiztonsági hírek

Vendors' news

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft 

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft 

Yanac
Wordfence Bug Bounty Program Monthly Report – April 2026 

Wordfence Bug Bounty Program Monthly Report – April 2026 

Yanac

CVE-2026-66066: Defending Against the “KindaRails2Shell” Pre-Auth RCE 

Yanac

Thinking Outside the Black Box: Defenders Need Open Source AI 

Yanac

Operationalizing Offensive AI: An Open Framework for Modern Security 

Yanac

Life with the Penguin

Linux Security Patches Have Become Machine-Readable Intelligence

Linux Security Patches Have Become Machine-Readable Intelligence

Yanac
Understanding Trust Boundaries in Linux Infrastructure

Understanding Trust Boundaries in Linux Infrastructure

Yanac
From Beginner to Pro: How Your Linux Setup Should Evolve as a Developer

From Beginner to Pro: How Your Linux Setup Should Evolve as a Developer

Yanac
Why Python Is the Right Language for Linux Security Automation

Why Python Is the Right Language for Linux Security Automation

Yanac
From Dirty COW to DirtyDecrypt: Why Linux Keeps Rediscovering Memory Ownership Bugs

From Dirty COW to DirtyDecrypt: Why Linux Keeps Rediscovering Memory Ownership Bugs

Yanac

Check this out

Season 4 of The Europol Podcast available now

Season 4 of The Europol Podcast available now

Yanac
Season 4 of The Europol Podcast available now

Season 4 of The Europol Podcast available now

Yanac
Migrant smuggling network using rental cars dismantled across the Balkans

Migrant smuggling network using rental cars dismantled across the Balkans

Yanac
Europol-led action against nihilistic violent extremist network “The Com”

Europol-led action against nihilistic violent extremist network “The Com”

Yanac
Europol-led action against nihilistic violent extremist network “The Com”

Europol-led action against nihilistic violent extremist network “The Com”

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

Kína AI használata autonóm támadásokhoz
Editors' Pick

Kína AI használata autonóm támadásokhoz

Geronimo
CaptiveCrunch kampány
Editors' PickUncategorized

CaptiveCrunch kampány

Geronimo
PLC-k kihasználására hívja fel a figyelmet a CISA
Editors' PickICS

PLC-k kihasználására hívja fel a figyelmet a CISA

Geronimo
PolinRider kampány
Editors' Pick

PolinRider kampány

Geronimo

IOT

ICS

5G trends

Back-to-School Is Expensive Enough Already. Here Are the Best Deals to Help With That

Back-to-School Is Expensive Enough Already. Here Are the Best Deals to Help With That

Yanac
FCC Rule Banning Foreign Robots Could Sweep Up New Home Robot Vacuums

FCC Rule Banning Foreign Robots Could Sweep Up New Home Robot Vacuums

Yanac
Most Smart Fitness Devices Lack Essential Data Protection, EFF Warns

Most Smart Fitness Devices Lack Essential Data Protection, EFF Warns

Yanac
Can Smart Home Devices Catch on Fire? I Researched the Facts You Should Know

Can Smart Home Devices Catch on Fire? I Researched the Facts You Should Know

Yanac

Dysphoria IoT botnet

Geronimo

PLC-k kihasználására hívja fel a figyelmet a CISA

Geronimo

New CISA guidance targets software supply chain risks on secure use of open source software across federal agencies

Yanac

NetRise Provenance strengthens software supply chain security with developer workflow enforcement

Yanac

Team Cymru launches Pure Signal Command to accelerate AI-driven threat intelligence and incident response

Yanac

CISA, federal agencies, international partners refresh SBOM guidance with new data fields to boost software supply chain security

Yanac
Apple’s Tim Cook era ends with a record $109B quarter

Apple’s Tim Cook era ends with a record $109B quarter

Yanac
12 top productivity tips for Microsoft Edge

12 top productivity tips for Microsoft Edge

Yanac
Google has used AI to patch 1,072 vulnerabilities in Chrome

Google has used AI to patch 1,072 vulnerabilities in Chrome

Yanac
DefCon security conference bans smart glasses with recording capabilities

DefCon security conference bans smart glasses with recording capabilities

Yanac
Copilot worm can spread through Microsoft Word docs

Copilot worm can spread through Microsoft Word docs

Yanac

Vulnerabilities

CVE-2025-71402 | better-auth up to 1.3.34 Multi-Session Plugin internalAdapter.deleteSessions _multi-* input validation

Yanac

CVE-2026-66401 | FreeRDP up to 3.28.9 UVC H.264 extension-unit parser out-of-bounds

Yanac

CVE-2025-71404 | better-auth up to 1.1.15 Error Page /api/auth/error cross site scripting

Yanac

CVE-2026-67305 | FreeRDP up to 3.28.x Clipboard heap-based overflow

Yanac

CVE-2026-67318 | axios up to 1.17.x HTTP Adapter allocation of resources

Yanac

CVE-2026-67310 | OpenRemote up to 1.26.2 AlarmResourceImpl AlarmResourceImpl.setAssetLinks resource injection

Yanac

CVE-2026-67314 | axios up to 1.17.x Basic Auth Subfield resolveConfig.js prototype pollution

Yanac

CVE-2026-67317 | axios up to 1.17.9 fetch adapter resource consumption

Yanac

CVE-2026-67320 | axios up to 0.33.0/1.18.0 HTTP Adapter/Request Interceptor proxy/auth improper authorization

Yanac

CVE-2026-67306 | FreeRDP up to 3.28.0 RDP6 Planar RLE Bitmap Decoder planar.c out-of-bounds (EUVD-2026-51835)

Yanac

CVE-2026-67308 | Wazuh Workflows VERSION.json os command injection (44bf114)

Yanac

CVE-2026-67312 | axios up to 0.32.9/1.17.9 FormData JSON Serializer buildPath recursion

Yanac

CVE-2026-67319 | axios up to 0.32.9/1.17.x prototype pollution

Yanac

CVE-2026-67321 | axios up to 0.32.9 Form Serialization toFormData.js JSON.stringify resource consumption (EUVD-2026-51812)

Yanac

CVE-2026-67302 | FreeRDP up to 3.28.0 Camera Redirection encoding.c ecam_encoder_context_init FrameRateDenominator divide by zero

Yanac

CVE-2026-67303 | FreeRDP up to 3.28.x Serial serial_main.c serial_process_irp_device_control assertion (EUVD-2026-51818)

Yanac

CVE-2026-67304 | FreeRDP up to 3.28.x free_reader_states null pointer dereference

Yanac

CVE-2026-67307 | Wazuh up to 5.0.0-beta2 Inventory Sync Start cluster_name/cluster_node input validation

Yanac

CVE-2026-67309 | Traefik up to 3.7.7 RewriteTarget Middleware path traversal

Yanac

CVE-2026-67313 | axios >=0.28.0up to 1.17.x FormData formDataToJSON names recursion

Yanac

CVE-2026-67316 | axios prior 1.18.0/0.33.0 Request Construction/HTTP Adapter resolveConfig.js axios.get/axios.delete/axios.head/axios.options config.data/proxy/paramsSerializer prototype pollution

Yanac
Take me home!

Follow Us:

Rss Linkedin