Security Bulletin

Per TechCrunch, Signal President Meredith Whittaker has voiced significant concerns regarding the privacy implications of widely used AI chatbots, emphasizing that these tools should not be perceived as sentient or trustworthy entities.

The Prinz Eugen threat actor employs a hands-on-keyboard approach, leveraging legitimate remote monitoring and management (RMM) software and living-off-the-land tools, according to Threatdown.

The vulnerability resides in an exposed REST API endpoint within the Gravity SMTP plugin.

The Federal Data Center Enhancement Act of 2023, which currently governs federal facilities nationwide, mandates protections for uptime, power reliability, physical security, cybersecurity, and resilience against natural disasters.

The big lesson: too many organizations still don’t understand how identity works inside their applications.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Cisco IT secured an AI-powered workforce by moving to a unified, cloud-native Security Service Edge fabric, reducing help desk cases by 18% and eliminated 20+ legacy VPNs.

As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity expertise, if even on a part-time basis.

Megjelent a 2026. 25. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2026.06.12. és 2026.06.18. között kezelt incidensek, valamint az elosztott kormányzati IT biztonsági csapdarendszerből (GovProbe1) származó adatok statisztikai eloszlását is...

I detected an interesting phishing email this morning. It targets a major Belgian bank: