Biztonsági szemle

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Linx Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this...

CISA released two Industrial Control Systems (ICS) advisories on October 17, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-290-01 Schneider Electric EcoStruxure...

Why the importance of identity management increased as cloud adoption expanded.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

HIPAA compliance does not equal security, as continuing attacks on healthcare organizations show. Medical devices need to be secured.

Enterprises need to create a secure structure for tracking, assessing, and monitoring their growing stable of AI business apps.

The MITRE ATT&CK Evaluation is a valuable resource that can be used to inform your decision when selecting a security vendor.

In a bid to strengthen authentication and security measures against relay attacks and unauthorized network access, Microsoft has confirmed that it will be using Kerberos in place of the NT LAN Manager in Windows 11, The Hacker News reports.

Man-in-the-middle attacks against unmanned military vehicles have been identified and averted with 99% efficacy by a new artificial intelligence algorithm, reports BleepingComputer.

No patches have been issued for 35 of 55 security vulnerabilities impacting the popular open-source caching and forwarding proxy Squid that were identified two years ago, according to SecurityWeek.

Numerous class action lawsuits have been filed against major U.S. biotechnology and genetic testing firm 23andMe following a massive data breach stemming from credential stuffing attacks that compromised information from almost 1 million Ashkenazi...