Biztonsági szemle

Machine identities were the gap. AI agents are widening it.

Portuguese businesses operate in the same native language as Brazilian hackers, making those businesses easy targets.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.

Ahead of Black Hat USA, researchers find exploitable flaws in how Microsoft handles passkeys that could allow attackers to impersonate privileged users.

The sheer number of Linux kernel CVEs, published recently, has raised questions about effective vulnerability management.

This new tool inspects Android and iOS apps at the binary level, creating a software bill of materials for each application and checking components against vulnerability databases and threat intelligence feeds.

The Exchange Server team confirmed that there will be no further extensions beyond the current Period 2 ESU program, which concludes in October 2026.

The HermeticReader vulnerability (CVE-2026-48294) exploited a flaw in the Adobe Acrobat extension, allowing any malicious website to inject commands into the extension.

This TrickBot variant, detailed in research by Fortinet's FortiGuard Labs, utilizes a modular architecture but features a redesigned transport layer.

A report by the GSMA, a global trade body representing the telecom industry, suggests the direct cost of replacing equipment from designated high-risk vendors could range from €30 billion to €40 billion.

The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model.