Biztonsági szemle

There are a variety of attacks seen from DShield honeypots [1]. Most of the time these commands are human readable. but every now and again they are obfuscated using base64 or hex encoding. A quick look for commands containing the "/x" delimiter give...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Once ethics guardrails are breached, generative AI and LLMs could become nearly unlimited in its capacity to enable evil acts, researchers warn.

The move by the e-commerce kahuna to offer advanced authentication to its 300+ million users has the potential to move the needle on the technology's adoption, security experts say.

Passwordless passkey support will be deployed by WhatsApp to all users on Android devices in the coming weeks and months, just days after Google began passkey implementation by default, according to The Verge.

SecurityWeek reports that encrypted instant messaging platform Signal has shut down reports regarding a zero-day vulnerability impacting its chat app that became viral over the weekend, saying that further investigation has revealed no evidence to...

Extensive data-gathering features have been discovered by F-Secure researchers within the SpyNote Android banking trojan, which has been distributed mainly through SMS phishing campaigns, according to The Hacker News.

Numerous Guatemalan government websites have been taken down by distributed denial-of-service attacks deployed by Anonymous hacktivist group affiliates in support of protests led by Indigenous groups related to an alleged undemocratic challenge by...

Threat actors have targeted Israeli Android users with spyware through a fake version of the widely used rocket warning app "RedAlert Rocket Alerts" amid the ongoing conflict between Israel and Palestinian military group Hamas, BleepingComputer...

Kansas had its court systems impacted by outages last week, which Judge Philip Journey of Sedgwick County attributed to a ransomware attack although no further details regarding the intrusion have been provided, according to The Record, a news site...

Governments and other entities part of the Association of Southeast Asian Nations had their x86 systems subjected to attacks with the novel BLOODALCHEMY backdoor, which is included in the REF5961 intrusion set used by a China-linked threat operation...

Phishing attacks leveraging a new high-severity WinRAR vulnerability, tracked as CVE-2023-38831, have been deployed by pro-Russian hacking operations in a bid to facilitate credential exfiltration, The Hacker News reports.