Security Bulletin

It might be taking a bit longer than usual to respond to your submissions — here's why.

Don’t wait until a breach forces the company to adapt.

Megjelent a 2026. 26. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2026.06.19. és 2026.06.25. között kezelt incidensek, valamint az elosztott kormányzati IT biztonsági csapdarendszerből (GovProbe1) származó adatok statisztikai eloszlását is...

The fintech company's engineering-first application security team re-engineered the process for granting system access, making it easier and more secure for developers working on their projects. Here are the lessons learned from Robinhood's...

The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.

The kit includes Cloaked.gg, which displays benign sites to detected scanners and sandboxes.

The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.

The extension provides users with more time to transition to a new Windows 11 PC while continuing to receive critical security updates.

The MCP 2026-07-28 specification removes protocol-level security risks found in earlier versions, such as stateful initialization and server-initiated prompts, and mandates OAuth 2.1, thereby enhancing authentication security.

The Alliance for Creativity and Entertainment (ACE), in collaboration with UEFA, UC3, and Mexican authorities, successfully shut down 44 domains linked to PirloTV.