Biztonsági szemle

With legit sounding names, EvilAI's "productivity" apps are reviving classic threats like Trojans while adding new evasion capabilities against modern antivirus defenses.

The pervasive Vidar infostealer has evolved with a suite of new evasion techniques and covert data exfiltration methods, according to researchers.

A Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézet (NBSZ NKI) tájékoztatót ad ki az Adobe szoftverfejlesztő cég termékeit érintő sérülékenységekkel kapcsolatban, azok súlyossága, valamint az egyes biztonsági hibákat érintő aktív...

A Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézet (NBSZ NKI) riasztást ad ki a Microsoft szoftvereket érintő kritikus kockázati besorolású sérülékenységek kapcsán, azok súlyossága, kihasználhatósága és a szoftverek széleskörű...

The EU Data Act introduces new requirements for data sharing. Cisco is ready for these changes, but recommends targeted regulatory simplification for Europe to fully seize the opportunities of data-driven innovation and AI.

SnortML, Cisco's innovative ML engine for Snort IPS, proactively detects evolving exploits like SQL Injection, Command Injection & XSS on-device for privacy.

Researchers say a likely Russian APT used a compromised employee email account to attack Kazakhstan's biggest company, though the oil and gas firm claims it was a pen test.

Researchers discovered that measures designed to make AI more transparent to users and regulators can also make it easier for bad actors to abuse.

1) Run BIND on a server dedicated to DNS only. Reasons include: Minimized risk of impact to DNS services due to other applications consuming server resources (perhaps due to an attack on those services or application error). Conversely, minimized...

Cisco and Indus Action are passionate about ensuring that social protection systems in India effectively serve those who need them most by simplifying school admissions for underserved families, streamlining support for maternal health, and enhancing...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Since the last update [ 5], over the past few months I added several enhancements to DShield SIEM and webhoneypot sensor collection that included an update to the interface to help with DShield sensor analysis. I updated the main dashboard to have...