Security Bulletin

Be aware: a rash of phishing campaigns are leveraging the anxiety and trust employees have in password vaults securing all of their credentials.

Researchers discovered more than 550 unique secrets exposed in Visual Studio Code marketplaces, prompting Microsoft to bolster security measures.

AI might help some threat actors in certain respects, but one group is proving that its use for cyberattacks has its limits.

Tisztelt Ügyfelünk! A Nemzeti Kiberbiztonsági Intézet riasztást ad ki az F5 BIG-IP, F5OS, BIG-IP Next for Kubernetes, BIG-IQ, és APM eszközöket érintő sérülékenységek, valamint a sebezhető eszközök elleni aktív várható kibertámadási hullám kapcsán. A...

The deal, which builds on LevelBlue’s recent acquisition of Trustwave and Aon, aims to provide customers with a broad portfolio of extended detection and response (XDR), managed detection and response (MDR), and forensic services.

The cyber-espionage group has been using sophisticated custom tools to target government and diplomatic entities in South Asia since early 2025.

F5 disclosed a breach this week that included zero-day bugs, source code, and some customer information.

The Clop ransomware group claimed responsibility for stealing the university's data as part of a broader campaign against Oracle customers.

Organizations across the continent saw 10% fewer attacks in September, but Africa remains the most attacked region in the world, leading the Global South.

October 2025's enormous Patch Tuesday offers plenty of nightmares for admins, including actively exploited zero-days and insidious high-severity privilege-escalation bugs — and it spells curtains for Windows 10 updates.

Chinese APT threat actors compromised an organization's ArcGIS server, modifying the widely used geospatial mapping software for stealth access.

The proof-of-concept exploit allows an attacker to steal sensitive data from Gmail, Google Accounts, Google Authenticator, Google Maps, Signal, and Venmo.