Editors' Pick ICS 

AI az OT behatolásban

Geronimo

A Dragos elemzése szerint egy 2025 vége és 2026 eleje között zajló mexikói kampány során a támadók kereskedelmi AI modelleket – elsősorban az Anthropic Claude

Editors' Pick 

Canvas oktatási platform kihasználása

Geronimo

A ShinyHunters támadása megbénította a Canvas LMS oktatási platformot, amelyet világszerte egyetemek és iskolák ezrei használnak vizsgák, beadandók és tananyagok kezelésére. Az incidens különösen

Editors' Pick 

Instagram: üzenetek opcionális végpontok közötti titkosításának vége

Geronimo

A Instagram 2026. május 8-tól megszüntette a direkt üzenetek opcionális végpontok közötti titkosítását (E2EE). Ez azt jelenti, hogy a korábban titkosított Instagram-chatek tartalma ismét

TclBanker 

Geronimo

Gemini kritikus TrustIssues sérülékenység

Geronimo

CallPhantom kampány

Geronimo

Philips Hue Bridge – Zigbee kihasználása

Geronimo

Lazarus Group Git hookban

Geronimo

187 millió dolláros csalás

Geronimo

Azonosítólopás okosba

Geronimo

Rejtett kiber- és információs műveleti tanszék

Geronimo

VoidStealer

Geronimo

Bun-nal terjesztett NWHStealer 

Geronimo

Jelszó világnap

Geronimo

Államilag támogatott árnyék

Geronimo

News

News 

Security Affairs newsletter Round 576 by Pierluigi Paganini – INTERNATIONAL EDITION

Yanac

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs

The best Sony TVs of 2026: Expert tested and reviewed

Yanac

Yes, you can get Microsoft 365 free – here’s how

Yanac

Outrunning SHA256 with Physics

Yanac

JDownloader site hacked to replace installers with Python RAT malware

Yanac

Technical Analysis of EagleSpy V6.0 (CraxsRAT Rebrand) Distributed Through Odysee and Telegram

Yanac

Defence in Depth: A Practical Secure Corporate Network Topology

Yanac

Memory Poisoning AI Agents via ChromaDB

Yanac

Kiberbiztonsági hírek

Vendors' news

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk 

Yanac
The Evolution of Kaspersky SIEM | Kaspersky official blog 

The Evolution of Kaspersky SIEM | Kaspersky official blog 

Yanac
Nearly half of the world’s passwords can be cracked in under a minute | Kaspersky official blog 

Nearly half of the world’s passwords can be cracked in under a minute | Kaspersky official blog 

Yanac

What Is a Sovereign Cloud? 5 Reasons You May Need One 

Yanac

CVE-2026-34354: Guardicore Local Privilege Escalation Vulnerability 

Yanac

Life with the Penguin

Linux Attackers Abuse Admin Tools For Stealthy Intrusions

Linux Attackers Abuse Admin Tools For Stealthy Intrusions

Yanac
Ubuntu Dirty Frag Important Local Privilege Escalation Exploit

Ubuntu Dirty Frag Important Local Privilege Escalation Exploit

Yanac
Linux Firewall Rules Management Challenges Kubernetes Security

Linux Firewall Rules Management Challenges Kubernetes Security

Yanac

Dirty Frag Linux kernel local privilege escalation vulnerability mitigations

Yanac
Container Security Misconfigurations That Still Go Unnoticed

Container Security Misconfigurations That Still Go Unnoticed

Yanac

Check this out

Atlantic ‘Cocaine Highway’ broken in coordinated maritime operation

Yanac

Europol announces transition arrangements following the departure of Executive Director Catherine De Bolle

Yanac

“Terrorgram” network dealt another blow as member sentenced in Denmark

Yanac

Call centres dismantled and ten arrested in EUR 50 million online fraud case

Yanac

OTF GRIMM one-year anniversary: violence-as-a-service targets published on EU Most Wanted

Yanac

CERT news

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

Featured categories

AI az OT behatolásban
Editors' PickICS

AI az OT behatolásban

Geronimo
Canvas oktatási platform kihasználása
Editors' Pick

Canvas oktatási platform kihasználása

Geronimo
Instagram: üzenetek opcionális végpontok közötti titkosításának vége
Editors' Pick

Instagram: üzenetek opcionális végpontok közötti titkosításának vége

Geronimo
TclBanker 
Editors' Pick

TclBanker 

Geronimo

IOT

ICS

5G trends

You and Your Cat Deserve a Robot Litter Box. Grab One Now for a Record Low Price

You and Your Cat Deserve a Robot Litter Box. Grab One Now for a Record Low Price

Yanac
AI Is Making Home Tech Scams Easier Than Ever. Here’s the Fraud to Watch For

AI Is Making Home Tech Scams Easier Than Ever. Here’s the Fraud to Watch For

Yanac

Philips Hue Bridge – Zigbee kihasználása

Geronimo
See Your Home in a New Light With These Limited-Time Govee Discounts

See Your Home in a New Light With These Limited-Time Govee Discounts

Yanac
Amazon Blink Unveils Its Most Advanced Video Doorbells for New Budget Choices

Amazon Blink Unveils Its Most Advanced Video Doorbells for New Budget Choices

Yanac

WEF highlights that data centres face mounting cybersecurity and resilience challenges as OT integration accelerates

Yanac

AI az OT behatolásban

Geronimo

Kaspersky uncovers targeted DAEMON Tools supply chain attack affecting manufacturing, government sectors

Yanac

Dragos details AI-assisted intrusion targeting Mexican water utility as Claude, OpenAI models used to pursue OT access

Yanac

Refrigerator Used to Hack Chlorine Plant

Yanac
Apple vs. social engineering: Terminal paste trap blocked

Apple vs. social engineering: Terminal paste trap blocked

Yanac
AI clones: the good, the bad, and the ugly

AI clones: the good, the bad, and the ugly

Yanac
LinkedIn illegally blocking free accounts from seeing ‘who’s viewed your profile’ data, group alleges

LinkedIn illegally blocking free accounts from seeing ‘who’s viewed your profile’ data, group alleges

Yanac
Microsoft 365: A guide to the updates

Microsoft 365: A guide to the updates

Yanac
EU lawmakers strike provisional deal to soften AI Act

EU lawmakers strike provisional deal to soften AI Act

Yanac

Vulnerabilities

CVE-2026-42562 | alextselegidis plainpad up to 1.1.0 API Endpoint /api.php/v1/users/ privileges management (ID 138)

Yanac

CVE-2026-42569 | phpVMS up to 7.0.5 access control (GHSA-fv26-4939-62fh)

Yanac

CVE-2026-41893 | SignalK signalk-server up to 2.24.x HTTP Login Endpoint /login app.securityStrategy.login excessive authentication (GHSA-vmfm-ch9h-5c7g)

Yanac

CVE-2026-42333 | quarkiverse quarkus-openapi-generator up to 2.16.x OpenAPI Path Template information disclosure (GHSA-fr8f-rwjx-f32v)

Yanac

CVE-2026-42576 | chainguard-dev apko up to 1.2.6 JWKS Endpoint implementation.go type conversion (GHSA-m7hm-vm4x-28jf)

Yanac

CVE-2026-42571 | PelicanPlatform pelican up to 7.21.4/7.22.2/7.23.2/7.24.1 Web User Interface authorization (GHSA-rpfr-x88x-xwcw)

Yanac

CVE-2026-42575 | chainguard-dev apko up to 1.2.6 on APKINDEX ChecksumString data authenticity (GHSA-hcwr-pq9g-rq3m)

Yanac

CVE-2026-42605 | AzuraCast up to 0.23.5 Request Parameter Flow.js /api/station/{station_id}/files/upload path traversal (GHSA-vp2f-cqqp-478j)

Yanac

CVE-2026-42601 | ArchiveBox up to 0.8.6rc0 Environment Variable /add/ argument injection (GHSA-3h23-7824-pj8r)

Yanac

CVE-2026-42245 | ruby net-imap up to 0.4.23/0.5.13/0.6.3 Net::IMAP algorithmic complexity (GHSA-q2mw-fvj9-vvcw)

Yanac

CVE-2026-42246 | ruby net-imap up to 0.3.9/0.4.23/0.5.13/0.6.3 Net::IMAP error condition (GHSA-vcgp-9326-pqcp)

Yanac

CVE-2026-42256 | ruby net-imap up to 0.4.23/0.5.13/0.6.3 Net::IMAP blocking code in single-threaded, non-blocking context (GHSA-87pf-fpwv-p7m7)

Yanac

CVE-2026-42257 | ruby net-imap up to 0.4.23/0.5.13/0.6.3 Net::IMAP crlf injection (GHSA-hm49-wcqc-g2xg)

Yanac

CVE-2026-42258 | ruby net-imap up to 0.4.23/0.5.13/0.6.3 Net::IMAP command injection (GHSA-75xq-5h9v-w6px)

Yanac

CVE-2026-42606 | AzuraCast up to 0.23.5 Password Reset password recovery (GHSA-gv7r-3mr9-h5x8)

Yanac

CVE-2026-45182 | GrapheneOS prior 2026050400 confused deputy

Yanac

CVE-2026-45181 | Hex-Rays IDA up to 9.3sp1 via argument injection

Yanac

CVE-2026-45184 | KDE Kdenlive up to 26.04.0 Project File inclusion of functionality from untrusted control sphere

Yanac

CVE-2026-7262 | PHP up to 8.2.30/8.3.30/8.4.20/8.5.5 SOAP Server null pointer dereference (GHSA-hmxp-6pc4-f3vv)

Yanac

CVE-2026-6104 | PHP up to 8.4.20/8.5.5 out-of-bounds (GHSA-74r9-qxhc-fx53)

Yanac

CVE-2025-14179 | PHP up to 8.2.30/8.3.30/8.4.20/8.5.5 PDO Firebird Driver strncat sql injection (GHSA-w476-322c-wpvm)

Yanac
Take me home!

Follow Us:

Rss Linkedin