Biztonsági szemle

Most domains created by Revolver Rabbit contained at least one dictionary word and a five-digit number separated from each other by a dash, a report from Infoblox showed.

APT41, also known as Wicked Panda, Barium, and Winnti, exploited Tomcat Apache Manager servers' web shells to facilitate dropper execution and backdoor distribution before leveraging the DUSTTRAP multi-stage plugin framework to conceal malicious...

Attacks exploiting known security flaws impacting internet-facing systems, including Microsoft Exchange Server, SonicWall, and F5 BIG-IP instances, as well as the open-source Pantegana and Spark RAT backdoors have been deployed by the new TAG-100...

Note: CISA will update this Alert with more information as it becomes available. Update 12:00 p.m., EDT, July 24, 2024: CrowdStrike continues to provide updates to its guidance, including: An instructional video to guide users through a self...

A 2024. 29. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2024.07.12. és 2024.07.18. között kezelt incidensek statisztikai adatait is tartalmazza.

Why having a plan for managing NHIs has become a requirement.

Tisztelt Ügyfelünk! A Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézet (NBSZ NKI) tájékoztatót ad ki a Microsoft Windows rendszereket érintő indítási hibajelenség miatt. Jelen információk szerint a hibát a Crowdstrike kiberbiztonsági cég...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The manual provides guidance on how to improve the resiliency of critical infrastructure.

The latest version of the Cloud Security Alliance's certification provides a comprehensive catalog of essential skills that cybersecurity professionals need to master.

Judge dismisses claims against SolarWinds for actions taken after its systems had been breached, but allows the case to proceed for alleged misstatements prior to the incident.

Wiz researchers gained access to credentials and other secrets using a cross-tenant exploit.