Biztonsági szemle

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

U.S.-based carriers blocked from using China-based services and equipment.

Exposing MFA’s weaknesses in an era of advanced threats.

Upgrading the organization's Windows 10 systems to Windows 11 could potentially introduce vulnerabilities into the environment through misconfigured hardware.

New agentic AI capabilities in Microsoft Security Copilot will allow agents to triage threats and provide recommendations.

The group, called FishMonger or Aquatic Panda, is working under contract for the Chinese government to steal data from governmental organizations, Catholic charities, NGOs, think tanks, and more.

The FBI's Denver field office says the tools will convert documents while also dropping malware and scraping users' systems for sensitive data.

More than 40% of all Internet-facing container orchestration clusters are at risk.

Driver with expired certificate evades EDR controls and deploys Medusa ransomware.

The persistent threat actor was caught using sophisticated Web shell techniques against an unnamed telecommunications company in Asia.

Russia and China spend billions of dollars on state media, propaganda, and disinformation, while the Trump administration has slashed funding for US agencies.