Biztonsági szemle

Updates have been issued by Apple to address a pair of zero-day vulnerabilities affecting iOS, macOS, iPadOS, tvOS, and visionOS, which was leveraged in a highly advanced and targeted iPhone attack, according to BleepingComputer.

Dark web carding market BidenCash has exposed 910,380 stolen credit card details on the XSS cybercrime forum in a bid to tout their "anti-public system" mechanism that ensures the absence of already-circulated cards from the marketplace, Hackread...

SecurityWeek reports that the Oregon Department of Environmental Quality had more than 2.5 TB of data claimed to have been compromised by the Rhysida ransomware operation in an attack last week following the agency's assertion that none of its data...

Newly emergent artificial intelligence-based presentation tool Gamma has been exploited in multi-stage phishing attacks involving redirections to fake Microsoft login pages, reports The Hacker News.

Explore how the innovative partnership between Cisco and St. Clair College is transforming data science education. Discover how this collaboration, highlighted by the college's victory in the 2024… Read more on Cisco Blogs

A 2025. 16. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2025.04.11. és 2025.04.16. között kezelt incidensek statisztikai adatait is tartalmazza.

CISA funded the CVE program for another 11 months – can the industry get its act together in such a short time?

Gartner projects IT security spending in the MENA region will continue to increase in 2025, with security services accounting for the most growth.

An Indian disaster-relief flight delivering aid is the latest air-traffic incident, as attacks increase in the Middle East and Myanmar and along the India-Pakistan border.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

[This is a Guest Diary by Jacob Claycamp, an ISC intern as part of the SANS.edu BACS program]

Nearly 9 in 10 apps tested by Zimperium used encryption that did not adhere to best practices.