Biztonsági szemle

CISA released six Industrial Control Systems (ICS) advisories on April 17, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-107-01 Schneider Electric Trio Q...

A 2025. 16. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2025.04.11. és 2025.04.16. között kezelt incidensek statisztikai adatait is tartalmazza.

CISA funded the CVE program for another 11 months – can the industry get its act together in such a short time?

Gartner projects IT security spending in the MENA region will continue to increase in 2025, with security services accounting for the most growth.

An Indian disaster-relief flight delivering aid is the latest air-traffic incident, as attacks increase in the Middle East and Myanmar and along the India-Pakistan border.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

[This is a Guest Diary by Jacob Claycamp, an ISC intern as part of the SANS.edu BACS program]

Nearly 9 in 10 apps tested by Zimperium used encryption that did not adhere to best practices.

The lesserknown ransomware group uses fake updaters on compromised sites to lure victims.

The attacks have been going on since shortly after Microsoft patched the vulnerability in March.

Researchers discovered new variants of the malware, which is tied to a China-nexus threat group, targeting Windows environments of critical infrastructure networks in Europe.

Trend Micro researchers detailed an emerging ransomware campaign by a new group known as "CrazyHunter" that is targeting critical sectors in Taiwan.