Security Bulletin

Megjelent a 2026. 26. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2026.06.19. és 2026.06.25. között kezelt incidensek, valamint az elosztott kormányzati IT biztonsági csapdarendszerből (GovProbe1) származó adatok statisztikai eloszlását is...

The fintech company's engineering-first application security team re-engineered the process for granting system access, making it easier and more secure for developers working on their projects. Here are the lessons learned from Robinhood's...

The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.

The kit includes Cloaked.gg, which displays benign sites to detected scanners and sandboxes.

The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.

The extension provides users with more time to transition to a new Windows 11 PC while continuing to receive critical security updates.

The MCP 2026-07-28 specification removes protocol-level security risks found in earlier versions, such as stateful initialization and server-initiated prompts, and mandates OAuth 2.1, thereby enhancing authentication security.

The Alliance for Creativity and Entertainment (ACE), in collaboration with UEFA, UC3, and Mexican authorities, successfully shut down 44 domains linked to PirloTV.

The Rex Platform is designed to combat increasingly sophisticated and frequent cyberattacks, which BreachRx attributes to the proliferation of AI tooling that lowers the barrier for less experienced threat actors.

The report by The Citizen Lab found evidence that a Russian government investigative unit used Cellebrite's UFED tool to access the iPhone of opposition politician Andrey Pivovarov in June 2021.

Educational institutions, the edtech companies they rely on, and, more concerningly, the challenges they pose for schools are the focus of the latest Reporters' Notebook video series.