Biztonsági szemle

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: KUNBUS Equipment: Revolution Pi Vulnerabilities: Missing Authentication for Critical Function, Authentication Bypass by Primary Weakness...

CISA released two Industrial Control Systems (ICS) advisories on May 1, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-121-01 KUNBUS GmbH Revolution Pi ICSMA-25...

CIS Hardened Images are virtual machine images hardened with the globally recognized secure configuration recommendations of the CIS Benchmarks.

A friend asked me if my pngdump.py tool can extract individual bits from an image (cfr. diary entry " Steganography Analysis With pngdump.py").

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Deepfakes and other forms of generative AI may be the catalysts to force a restructuring of the entire U.S. identity system.

The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam.

Voice firewalls, call authentication and real-time fraud detection offer robust vishing prevention.

The chat infrastructure and data-leak site of the notorious ransomware-as-a-service group has been inactive since March 31, according to security vendors.

Jen Easterly, former director of CISA, discussed the first 100 days of the second Trump administration and criticized the president's "mandate for loyalty" during a panel at RSAC 2025.

Security Scorecard's Dr. Aleksandr Yampolskiy discusses securing what you don't own with supply chain detection and response.

Fortra's Rohit Dhamankar discusses Cobalt Strike abuse decreases by 80% with Fortra, Microsoft, Health-ISAC initiative.