Security Bulletin

Tisztelt Ügyfelünk! A Nemzetbiztonsági Szakszolgálat Nemzeti Kibervédelmi Intézet tájékoztatót ad ki az orosz eredetű kiberbűnözői csoportokhoz köthető destruktív, üzenetküldő alkalmazásokat célzó támadásokkal kapcsolatban. A Google Threat...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Customers can now sign data and validate signatures using FIPS 204 and FIPS 205 compliant post-quantum cryptography.

Standard SecOps training is no longer enough to tackle modern cybersecurity challenges. People need to develop nontraditional skills.

A patch bypass for a bug in the popular desktop emulator enables root-level privilege escalation and has no fix in sight.

This move comes less than a year after the United States banned Kaspersky products, out of the same fear that the company is under Russian government control.

Evolving threats and hybrid identity challenges keep Microsoft's Active Directory at risk.

Confirmation by South Korea's data protection agency that the AI chatbot sent data to TikTok's Chinese parent company has spurred a ban in that nation, and is again is calling into question DeepSeek's safety.

I've been a big fan of Ryan Benson's unfurl[1] tool since he released it a little over 5 years ago. Unfurl is a tool that can parse/decode URLs including things like embedded timestamps and IP addresses. It can be run in gui form...

Attackers target password spraying attacks on Microsoft 365 accounts to run account takeovers.

A new streaming series about a catastrophic, nationwide cyberattack against US critical infrastructure is about as believable as its main character: an honest, bipartisan, universally beloved politician.