Biztonsági szemle

According to the study, around 400 stolen GenAI credentials are being sold by threat actors per day.

With sufficient privileges in Active Directory, attackers only have to create an "ESX Admins" group in the targeted domain and add a user to it.

It is a coordinated effort involving multiple threat clusters, each with toolsets and tactics to maintain long-term access.

Microsoft researchers said attackers sought to gain full administrative privileges on ESXi servers via Active Directory.

Yesterday, Apple released patches across all of its operating systems. A standalone patch for Safari was released to address WebKit problems in older macOS versions. Apple does not provide CVSS scores or severity ratings. The ratings below are based...

CyberScoop reports that increased support for creating, implementing, and expanding cybersecurity apprenticeship programs would be pushed by the new bipartisan Cyber Ready Workforce Act introduced by Sens. Jacky Rosen, D-Nev., and Marsha Blackburn, R...

The U.S. has joined ongoing efforts to ensure human rights protections under the United Nations cybercrime treaty draft, which is under final negotiations until Aug. 9, according to The Record, a news site by cybersecurity firm Recorded Future.

Major U.S. health savings account administrator HealthEquity had information from 4.3 million individuals exfiltrated following the infiltration of an online data storage location using a compromised third-party vendor's user accounts earlier this...

Organizations across Ukraine were noted by the country's Computer Emergency Response Team to have been targeted by Belarus-linked advanced persistent threat operation GhostWriter, also known as UAC-0057, in attacks distributing the PicassoLoader...

Impact from a "serious cyberattack" has been confirmed by Russian cybersecurity firm Avapost following claims of compromise by pro-Ukrainian hacking operation Cyber Anarchy Squad, reports The Record, a news site by cybersecurity firm Recorded Future.

The incident serves as a stark reminder of the fragility of our digital infrastructure. By adopting a diversified, resilient approach to cybersecurity, we can mitigate the risks and build a more secure digital future.