Editors' Pick 

WordPress Core kihasználás

Geronimo

A CVE-2026-87902 a WordPress Core súlyos, hitelesítés nélkül kihasználható sérülékenysége, amely a 4.7.0–7.1.1 verziókat érinti. A hiba a page-template feloldásában található: egy támadó manipulált pagename értékkel

Editors' Pick 

SalesBleed támadási lánc

Geronimo

A Zenity Labs SalesBleed néven mutatott be egy támadási láncot a Salesforce Agentforce ellen, amellyel egy külső támadó bejelentkezés és felhasználói kattintás nélkül tudott

Editors' Pick 

Operation Master

Geronimo

A SOCRadar Threat Research Unit az Operation Master néven egy teljes, több lépcsős kiberbűnözői infrastruktúrát tárt fel, amely a hálózati behatolástól az

Felhasználók visszaazonosítása

Geronimo

Kereskedők kihasználása

Geronimo

Storm-2570 ransomware-affiliate

Geronimo

n0n ramsomware

Geronimo

Elemzésálló malware

Geronimo

Tűz egy Starlink földi állomáson

Geronimo

Max Messenger vizsgálata

Geronimo

Legacy rendszerek védelme – csere nélkül

Geronimo

Microsoft regionális adattárolás

Geronimo

Thales 2026 Data Threat Report 

Geronimo

PamStealer macOS infostealer

Geronimo

Ingyenes Claude Max – phishing

Geronimo

News

OpenAI Agents Accessed US Government Websites Without Authorization
News 

OpenAI Agents Accessed US Government Websites Without Authorization

Yanac

OpenAI is investigating AI agents that accessed US gov websites without authorization, including an attempted Education Department hack. OpenAI disclosed

Microsoft pauses KB5002907 update after Office license deactivations

Microsoft pauses KB5002907 update after Office license deactivations

Yanac
Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Yanac
Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem

Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem

Yanac
Zero Trust for AI Agents Starts With Fixing Zero Visibility

Zero Trust for AI Agents Starts With Fixing Zero Visibility

Yanac
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Yanac
GitHub Actions re-enabled with Mini Shai-Hulud payload still active

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Yanac
Control Resonant is a great game — it’s even better when you read everything

Control Resonant is a great game — it’s even better when you read everything

Yanac

Kiberbiztonsági hírek

Vendors' news

AI Agents Can Be Secured. We Can Do It. 

AI Agents Can Be Secured. We Can Do It. 

Yanac
3 Consulting Myths Debunked by Unit 42 Experts 

3 Consulting Myths Debunked by Unit 42 Experts 

Yanac
Wordfence Bug Bounty Program Monthly Report – June 2026 

Wordfence Bug Bounty Program Monthly Report – June 2026 

Yanac
Storm-3168: Agentic-driven cloud attacks using compromised service principals 

Storm-3168: Agentic-driven cloud attacks using compromised service principals 

Yanac
CVE-2026-87902: Critical Vulnerability in WordPress 

CVE-2026-87902: Critical Vulnerability in WordPress 

Yanac

Life with the Penguin

A Linux eBPF Trampoline Can Outlive the Program It Calls

A Linux eBPF Trampoline Can Outlive the Program It Calls

Yanac
Why an Unlocked ext4 Buffer Can Restore Stale Directory Data

Why an Unlocked ext4 Buffer Can Restore Stale Directory Data

Yanac
USB/IP Teardown Race Can Rearm a Freed Linux Kernel Timer

USB/IP Teardown Race Can Rearm a Freed Linux Kernel Timer

Yanac
Linux ext4 Patch Blocks an Out-of-Bounds Read From Damaged Metadata

Linux ext4 Patch Blocks an Out-of-Bounds Read From Damaged Metadata

Yanac
Linux Patch Management For Enterprises: A Complete Guide

Linux Patch Management For Enterprises: A Complete Guide

Yanac

Check this out

Protecting citizens, preserving rights

Protecting citizens, preserving rights

Yanac
Six arrests for smuggling migrants via Schengen airports

Six arrests for smuggling migrants via Schengen airports

Yanac

GPT-6 Astra Breaks an Old Enigma Message

Yanac

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

Yanac
Researchers used Claude to hack OpenAI

Researchers used Claude to hack OpenAI

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

WordPress Core kihasználás
Editors' Pick

WordPress Core kihasználás

Geronimo
SalesBleed támadási lánc
Editors' Pick

SalesBleed támadási lánc

Geronimo
Operation Master
Editors' Pick

Operation Master

Geronimo
Felhasználók visszaazonosítása
Editors' Pick

Felhasználók visszaazonosítása

Geronimo

IOT

ICS

5G trends

Amazon Deals of the Day: Take Control of Your Home Temp With Almost 30% Off the Amazon Smart Thermostat

Amazon Deals of the Day: Take Control of Your Home Temp With Almost 30% Off the Amazon Smart Thermostat

Yanac
Smart Home Gift Buying Guide 2026: Upgrades Everyone Will Love

Smart Home Gift Buying Guide 2026: Upgrades Everyone Will Love

Yanac
Some of Samsung’s AI Fridges Became Giant, Cool Bricks After Bad Update

Some of Samsung’s AI Fridges Became Giant, Cool Bricks After Bad Update

Yanac
This AI Hub Wants to Run Your Whole Smart Home at Half Price

This AI Hub Wants to Run Your Whole Smart Home at Half Price

Yanac
Abode Home Security Starter Kit: The Speediest Setup I’ve Ever Seen

Abode Home Security Starter Kit: The Speediest Setup I’ve Ever Seen

Yanac
Optigo Networks launches AI Assistant to address building automation network expertise gap

Optigo Networks launches AI Assistant to address building automation network expertise gap

Yanac

Cloud Range introduces AI Readiness Framework to validate AI agents before operational deployment

Yanac
Ridge Security warns of high-severity TDengine vulnerability that can disrupt industrial telemetry and monitoring

Ridge Security warns of high-severity TDengine vulnerability that can disrupt industrial telemetry and monitoring

Yanac
CISA launches CVE Quality Era framework to improve vulnerability data quality, infrastructure, program governance

CISA launches CVE Quality Era framework to improve vulnerability data quality, infrastructure, program governance

Yanac

Non-routable protocols must be addressed

Yanac
Adobe’s next platform for Creative Cloud? Your AI assistant

Adobe’s next platform for Creative Cloud? Your AI assistant

Yanac
Microsoft’s new Copilot ‘super app’ unifies chat, code, agents

Microsoft’s new Copilot ‘super app’ unifies chat, code, agents

Yanac
Google is set to launch a small AI data center into space

Google is set to launch a small AI data center into space

Yanac
OpenAI wants you to use AI — but not to train its AI

OpenAI wants you to use AI — but not to train its AI

Yanac
AI tools help hacker break in for $25 per target

AI tools help hacker break in for $25 per target

Yanac

Vulnerabilities

CVE-2026-100718 | Froxlor up to 2.3.10 Allowed-Sender Feature EmailSender.add improper authorization

Yanac

CVE-2026-100719 | Froxlor up to 2.3.11 DirProtections Listing information disclosure

Yanac

CVE-2026-100641 | siyuan-note SiYuan up to 3.8.3 Card Manager viewCards.ts cross site scripting

Yanac

CVE-2026-100652 | vllm-project vLLM up to 0.23.0 Rust HTTP/gRPC frontends memory corruption

Yanac

CVE-2026-100654 | vllm-project vLLM up to 0.28.x EngineCore /v1/completions stop_token_ids input validation

Yanac

CVE-2026-100657 | Netty prior 4.1.138.Final/4.2.18.Final StompSubframeDecoder memory allocation

Yanac

CVE-2026-100661 | Netty up to 4.2.17.Final QPACK Decoder QpackUtil.decodePrefixedInteger resource consumption

Yanac

CVE-2026-100674 | stoatchat up to 0.15.4 input validation

Yanac

CVE-2026-100665 | Netty up to 4.2.17.Final QUIC Certificate Verification certificate validation

Yanac

CVE-2026-100677 | stoatchat up to 0.15.4 Login Endpoint /api/auth/session/login information disclosure

Yanac

CVE-2026-100679 | stoatchat up to 0.15.4 missing authentication

Yanac

CVE-2026-100701 | Nodemailer up to 10.0.1 DNS Cache certificate validation

Yanac

CVE-2026-100703 | Kyverno up to 1.19.0 Global Context Library globalContext.get information disclosure

Yanac

CVE-2026-100684 | Budibase up to 3.44.x SSO Login sso.authenticate improper authentication

Yanac

CVE-2026-100706 | Kyverno up to 1.19.0 Policy urlPath path traversal

Yanac

CVE-2026-100707 | Kyverno up to 1.19.0 ApiCall Context Entry urlPath privileges management

Yanac

CVE-2026-100644 | siyuan-note SiYuan up to 3.8.3 Graph Query Endpoint dailyNoteSavePath sql injection

Yanac

CVE-2026-100640 | SiYuan up to 3.8.3 IPC improper authorization

Yanac

CVE-2026-100647 | vllm-project vLLM up to 0.28.x EngineCore cache_salt denial of service

Yanac

CVE-2026-100675 | stoatchat up to 0.15.4 Acknowledgement Worker denial of service

Yanac

CVE-2026-100666 | Netty prior 4.2.17.Final/4.1.137.Final HttpServerCodec pollMethod response splitting

Yanac
Take me home!

Follow Us:

Rss Linkedin