Biztonsági szemle

Here are three strategies that can help security teams prevent and mitigate the impact of a QR-code attack.

Atlassian has released security updates to address vulnerabilities affecting multiple Atlassian products. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators...

A 2023. 49. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2023.12.01. és 2023.12.07. között kezelt incidensek statisztikai adatait is tartalmazza.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Nation-states were noted by Sen. Ron Wyden, D-Ore., to have been leveraging push notifications to enable surveillance on Apple and Google smartphones, according to TechCrunch.

Increasingly prevalent data privacy threats have prompted the Federal Communications Commission's Privacy and Data Protection Task Force to partner with attorneys general of New York, Connecticut, Pennsylvania, and Illinois in consolidating resources...

Data extortion has been increasingly leveraged by ransomware operations instead of data encryption, with the change in attack techniques fueled by improved ransomware detection systems and stronger law enforcement crackdowns on ransomware gangs...

Nissan has disclosed that its Australia- and New Zealand-based systems have been subjected to a cyberattack, according to The Record, a news site by cybersecurity firm Recorded Future.

BleepingComputer reports that Australian global shipbuilding firm Austal had its U.S. subsidiary impacted by a cyberattack, which the Hunters International ransomware operation has since taken responsibility for.

Inadvertent credential leakage from mobile password managers discovered TechCrunch reports that Android apps' autofill functionality has been impacted by a flaw that could result in the accidental exposure of credentials saved in mobile password...

Cloud accounts could be compromised to facilitate further malicious activity through the exploitation of the Amazon Web Services Security Token Service, according to The Hacker News.