Editors' Pick 

Kompromittáció után tartós hozzáférés

Geronimo

A SpecterOps kutatói egy új posztkompromittációs perzisztencia- és C2-technikát mutattak be, amely Chromium-alapú böngészők (Chrome, Edge stb.) bővítményeit használja tartós hozzáférés fenntartására. A módszer nem egy böngészősérülékenységet

Editors' Pick 

Vita az Europol hatáskörének bővítéséről

Geronimo

Az Európai Bizottság új rendeletjavaslata jelentősen kibővítené az Europol hatáskörét annak érdekében, hogy az ügynökség hatékonyabban léphessen fel a szervezett bűnözés, a terrorizmus, a hibrid

Editors' Pick 

Apple Threat Notifications

Geronimo

Az Apple újabb fenyegetésértesítéseket küldött ki olyan felhasználóknak, akiket a vállalat megítélése szerint kereskedelmi kémszoftverrel próbáltak célba venni. A mostani hullám 110 ország érintettjeit

Németország: bővülő jogkörök a hírszerző szolgálatoknál

TrainedR

Jewelbug kampányok

Geronimo

Malware crypting szolgáltatások 

Geronimo

Aktív kiberműveletek a magánszektorból

Geronimo

PATCHCORD

Geronimo

434 000 CI/CD pipelinet kompromittáltak

Geronimo

Windows Safe Mode Akira előtt

Geronimo

Aktív SharePoint kihasználás

Geronimo

Operation Dream Job továbbfejlesztve

Geronimo

Lengyelország: egészségügyi adatszivárgás

Geronimo

Atomenergia prioritása

Geronimo

Signal Automatic Key Verification 

Geronimo

News

No 10’s ads for a TikTok team show why social media is a smart career move
News 

No 10’s ads for a TikTok team show why social media is a smart career move

Yanac

The Guardian’s deputy editor of social platforms on the demand from high-profile people and brands for help in harnessing the

Polaroid’s tiny instant camera is $72 and includes a free pack of film

Polaroid’s tiny instant camera is $72 and includes a free pack of film

Yanac
Matt Groening lets slip that Simpsons: Hit & Run might be making a comeback

Matt Groening lets slip that Simpsons: Hit & Run might be making a comeback

Yanac
Have a laugh at AI’s expense by roleplaying as a chatbot

Have a laugh at AI’s expense by roleplaying as a chatbot

Yanac
Zhu Rongji left Asia a blueprint — and it still works

Zhu Rongji left Asia a blueprint — and it still works

Yanac
Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware

Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware

Yanac
SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild

SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild

Yanac
Don’t overlook Elektron’s budget electronic music instruments

Don’t overlook Elektron’s budget electronic music instruments

Yanac

Kiberbiztonsági hírek

Vendors' news

40,000 WordPress Sites affected by Authentication Bypass Vulnerability in User Profile Builder WordPress Plugin 

40,000 WordPress Sites affected by Authentication Bypass Vulnerability in User Profile Builder WordPress Plugin 

Yanac
The Good, the Bad and the Ugly in Cybersecurity – Week 33 

The Good, the Bad and the Ugly in Cybersecurity – Week 33 

Yanac
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026) 

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026) 

Yanac
Secure all your internal vibe-coded applications — in one click 

Secure all your internal vibe-coded applications — in one click 

Yanac

The OWASP Top 10 for LLM Applications 2026: From Model Risks to Agentic Security 

Yanac

Life with the Penguin

Linux BPF Patches Fix Sparse CPU Bugs Causing Out-of-Bounds Read

Linux BPF Patches Fix Sparse CPU Bugs Causing Out-of-Bounds Read

Yanac
Routing Security in Practice: Detecting BGP Hijacks and RPKI-Invalid Announcements

Routing Security in Practice: Detecting BGP Hijacks and RPKI-Invalid Announcements

Yanac
Linux Audit Can Log a Syscall but Miss the Flag That Explains It

Linux Audit Can Log a Syscall but Miss the Flag That Explains It

Yanac
eBPF Security Logs May Show the Wrong File or Command, New Study Warns

eBPF Security Logs May Show the Wrong File or Command, New Study Warns

Yanac
Linux Security Roundup Privilege Escalation DoS Code Execution August 2026

Linux Security Roundup Privilege Escalation DoS Code Execution August 2026

Yanac

Check this out

1.6 Million Likely Impacted by RingCentral Data Breach

Yanac

Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

Yanac
Who’s Tracking You? Use This New Service to Find Out

Who’s Tracking You? Use This New Service to Find Out

Yanac

If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

Yanac

Trivy, Not LiteLLM Behind the 2,500 Org Compromise

Yanac

CERT news

CERT-FR riasztás

Geronimo

BSI: 17.000 Exchange szerver veszélyben Németországban

Yanac
Brigadier General Seán White

EU Katonai Törzs: Az uniós országoknak szorosabb együttműködésre van szükségük a kiberbiztonság terén

Yanac

Featured categories

Kompromittáció után tartós hozzáférés
Editors' Pick

Kompromittáció után tartós hozzáférés

Geronimo
Vita az Europol hatáskörének bővítéséről
Editors' Pick

Vita az Europol hatáskörének bővítéséről

Geronimo
Apple Threat Notifications
Editors' Pick

Apple Threat Notifications

Geronimo
Németország: bővülő jogkörök a hírszerző szolgálatoknál
Editors' Pick

Németország: bővülő jogkörök a hírszerző szolgálatoknál

TrainedR

IOT

ICS

5G trends

Best Smart Home Devices of 2026: Everyday Upgrades

Best Smart Home Devices of 2026: Everyday Upgrades

Yanac
7 Easy Home Upgrades to Prep for Fires the Smart Way

7 Easy Home Upgrades to Prep for Fires the Smart Way

Yanac
9 Home AI Tricks I’ve Found Work Best in My Busy Life

9 Home AI Tricks I’ve Found Work Best in My Busy Life

Yanac
Light Up the Night With This Govee Lamp Post, Now at a New Low Price

Light Up the Night With This Govee Lamp Post, Now at a New Low Price

Yanac
Pets Left in a Ruff Spot After Automatic Feeders Go Down

Pets Left in a Ruff Spot After Automatic Feeders Go Down

Yanac

Crytica Security, Forescout integrate deterministic threat detection with Vistaro to strengthen device security

Yanac

Nozomi, Sophos bring OT intelligence into IT security investigations, target detection and visibility gap

Yanac

NIST targets NVD modernization as AI transforms vulnerability discovery, risk assessment and remediation

Yanac

Symantec reveals Jewelbug espionage campaign targeting Asian governments, telecoms, critical infrastructure

Yanac

Acronis exposes Patchcord cyber espionage campaign targeting telecom and critical infrastructure in South Asia

Yanac
August’s Patch Tuesday is a monster: 751 fixes, with an exploited Windows flaw

August’s Patch Tuesday is a monster: 751 fixes, with an exploited Windows flaw

Yanac
Microsoft brings Copilot apps together ahead of ‘super app’ overhaul

Microsoft brings Copilot apps together ahead of ‘super app’ overhaul

Yanac
How to replace Edge as the default browser in Windows — and why you shouldn’t

How to replace Edge as the default browser in Windows — and why you shouldn’t

Yanac
OpenAI loses its AI ethics lead

OpenAI loses its AI ethics lead

Yanac
Meta gives up control of Chinese AI startup Manus after eight months

Meta gives up control of Chinese AI startup Manus after eight months

Yanac

Vulnerabilities

CVE-2026-12905 | Ladela Bookly Plugin up to 27.7 on WordPress Mobile Staff Cabinet API Handler1_0.php appointment ID resource injection

Yanac

CVE-2026-14524 | ProSolution WP Client Plugin up to 2.0.8 on WordPress File Deletion proSol_fileDeleteProcess filename unrestricted upload

Yanac

CVE-2026-16099 | eteubert Podlove Podcast Publisher Plugin up to 4.5.3 on WordPress create_link_item path traversal

Yanac

CVE-2026-14498 | daggerhart Query Wrangler Plugin up to 1.5.57 on WordPress wp_ajax_qw_form_ajax options access control

Yanac

CVE-2026-13167 | wpeverest Everest Forms Plugin up to 3.5.2 on WordPress AJAX handlers authorization

Yanac

CVE-2026-15441 | WC Product Table Lite Plugin up to 5.6.0 on WordPress Shortcode wcpt_style__sticky_sidebar laptop_scroll_offset cross site scripting

Yanac

CVE-2026-16779 | extendthemes Kubio AI Page Builder Plugin up to 2.8.5 on WordPress check_ajax_referer authorization

Yanac

CVE-2025-10005 | buildwps Password Protect Plugin up to 1.9.20 on WordPress ppw_free_set_password resource injection

Yanac

CVE-2026-13358 | croixhaug Simply Schedule Appointments Plugin up to 1.6.12.10 on WordPress Render Shortcode render-shortcode ssa_past_appointments information disclosure

Yanac

CVE-2026-15602 | Webaways NEX-Forms Plugin up to 9.2.4 on WordPress Submission Report2 AJAX additional_params sql injection

Yanac

CVE-2026-15963 | expresstech Quiz and Survey Master Plugin up to 11.2.1 on WordPress randon_category sql injection

Yanac

CVE-2026-16079 | pdamsten Fullscreen Galleria Plugin up to 1.6.12 on WordPress href sql injection

Yanac

CVE-2026-16098 | ProSolution Client Plugin up to 2.0.10 on WordPress File Upload proSol_handleFileUpload unrestricted upload

Yanac

CVE-2026-15002 | bluemediapl Platnosci Online Blue Media Plugin up to 5.0.0 on WordPress Css Editor Css_Editor::handle_save bm_woocommerce_css_editor_content cross site scripting

Yanac

CVE-2026-11780 | expresstech Quiz and Survey Master Plugin up to 11.2.1 on WordPress question_title cross site scripting

Yanac

CVE-2026-12477 | wpmonks Gravity Booster Plugin up to 5.26 on WordPress Admin Settings cross site scripting

Yanac

CVE-2026-15009 | saadiqbal Advanced File Manager Plugin up to 5.4.12 on WordPress soundFile cross site scripting

Yanac

CVE-2026-15066 | timwhitlock Loco Translate Plugin up to 2.8.7 on WordPress cross site scripting

Yanac

CVE-2026-15726 | Cryout Creations Serious Slider Plugin up to 1.4.0 on WordPress Shortcode theme cross site scripting

Yanac

CVE-2026-17123 | wproyal Royal Addons Plugin up to 1.7.1064 on WordPress Form Builder Widget wp_remote_post webhook_url server-side request forgery

Yanac

CVE-2026-18385 | ProfilePress Plugin up to 4.16.19 on WordPress Shortcode do_shortcode escape output

Yanac
Take me home!

Follow Us:

Rss Linkedin