Biztonsági szemle

It's unclear who the "Msupedge" threat actors were or what the motive for the attack was.

Miggo researchers said the AWS bug was caused by two factors: a missing token validation and a misconfigured security groups notification.

Effective international cooperation is essential to combat global cybercrime and uphold shared values, but the latest UN Convention against Cybercrime falls short and requires more attention before ratification by member states.

It might still sound far-fetched to say AI can develop critical thinking skills and help us make decisions in the cybersecurity industry. But we're not far off.

Aside from preventing disruptions of IT admin activities and other kernel dependency-related issues due to its operating system layer operations, Fortanix File System Encryption also eases agent deployment scaling and enables total access policy...

Discover how AI is revolutionizing government operations, enhancing public services, and reshaping cybersecurity.

Intrusions leveraging mass vulnerability scanning to compromise several organizations have accounted for 91% of all cyberattacks this year, compared with 69% in 2023.

Aside from pushing for increased OMB oversight over the utilization of FedRAMP across agencies, which would strengthen cloud-stored data security, the GAO also called for the development of federal guidelines on data inventory management.

Information leaked by the misconfigured database included individuals' full names, emails, phone numbers, encrypted passwords, and verification tokens, as well as join dates and private chats.

Impacted systems were isolated while others were taken down immediately after the discovery of the breach, said Microchip, a U.S. defense industry chip supplier, in a regulatory filing.

Unauthorized access to CannonDesign's network from Jan. 19 to 25 has prompted attackers to exfiltrate names, Social Security numbers, addresses, and driver's license numbers, said the firm in breach notification letters that emphasized the lack of...

Such a vulnerability, tracked as CVE-2024-5932, could be leveraged by threat actors to facilitate PHP object injection and subsequent Property Oriented Programming chain abuse involving the manipulation of deserialized objects for remote code...