Biztonsági szemle

While the Canonical apport package flaw, tracked as CVE-2025-5054, could be leveraged to facilitate data leaks through PID-reuse, the systemd-coredump bug, tracked as CVE-2025-4598, could be abused to force crash a SUID process that would be replaced...

Organizations need to abandon perimeter-based security for data-centric protection strategies in today's distributed IT environments.

The US needs to establish a clear framework to provide reasonable guardrails to protect its interests — the quicker, the better.

Cisco Secure Workload serves as a foundational solution for organizations seeking to implement an effective microsegmentation strategy.

Flexibility, collaboration, and modularity are defining the next wave of enterprise IT Enterprise infrastructure strategy is entering a new phase—one where the goal is no longer just centralization or consolidation, but intelligent distribution. IT...

CISA added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability CVE-2023-39780 ASUS RT-AX55 Routers OS Command...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Megjelent a SANS és a Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézet közös kiadványának 2025. júniusi száma, melyben bemutatjuk azt a rosszindulatú szoftvert (malware), amely lehetővé teszi a kiberbűnözők számára, hogy hozzáférjenek...

For most system and network administrators, the free SSH client Putty has been their best friend for years! This tool was also (ab)used by attackers that deployed a trojanized version[ 1]. Microsoft had the good idea to include OpenSSH (beta version)...

YARA 4.5.3 was released with 5 bugfixes.

While hunting, I found an interesting picture. It's a PNG file that was concatenated with two interesting payloads. There are file formats that are good candidates to have data added at the end of the file. PNG is the case because the file...