Biztonsági szemle

A Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézete (NBSZ NKI) felhívja a figyelmet a SECTOR 16 nevű hackercsoport által elkövetett kibertámadásra, amely 2025 júliusában egy magyarországi geotermikus termelőrendszert célzott meg.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Stories about Chinese APTs attacking the US and Canada are plentiful. In a turnabout, researchers found what they believe is a North American entity attacking a Chinese entity, thanks to a mysterious issue in Microsoft Exchange.

[This is a Guest Diary by Sihui Neo, an ISC intern as part of the SANS.edu BACS program]

For browsers, exploitation is out — and getting users to compromise their own systems is in. Improved browser security has forced attackers to adapt their tactics, and they've accepted the challenge.

In the heart of Australia’s capital, the Canberra Institute of Technology (CIT) is setting an of how education can evolve to meet the challenges of today while preparing students for the opportunities of tomorrow. Through a bold commitment to digital...

A container escape flaw involving the NVIDIA Container Toolkit could have enabled a threat actor to access AI datasets across tenants.

At Cisco Live, Wyebot’s AI-powered sensors gave the Cisco team full visibility into attendee Wi-Fi experience, helping ensure flawless connectivity in one of the most demanding wireless environments.

Worried about hackers employing LLMs to write powerful malware? Using targeted reinforcement learning (RL) to train open source models in specific tasks has yielded the capability to do just that.

The security startup provides managed detection and response services for small to midsize businesses to detect and address modern threats, such as ransomware, phishing attacks, and malicious insiders.

An impostor who posed as the secretary of state in text and voice communications with diplomats and politicians demonstrates the increased sophistication of and national security threat posed by the AI technology.

There are several reasons why one would set up an internal certificate authority. Some are configured to support strong authentication schemes, some for additional flexibility and convenience. I am going to cover the second part. In particular, it...