Security Bulletin

The White House launched Gold Eagle to coordinate vulnerability response in a new AI world, but multiple questions linger over how it's being implemented.

Google Cloud incorporates key Wiz capabilities into an agentic defense platform to automate threat detection and remediation against AI attacks.

The flaw allows an unauthenticated attacker to remotely compromise Oracle Payments.

Megjelent a 2026. 29. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2026.07.10. és 2026.07.16. között kezelt incidensek, valamint az elosztott kormányzati IT biztonsági csapdarendszerből (GovProbe1) származó adatok statisztikai eloszlását is...

Cisco Launches Johannesburg as its new 40 Communities destination and introduces Masibambisane, an initiative to revitalize the local community.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The Sandworm group, linked to Russia's GRU, is employing the social engineering technique called ClickFix.

Mandiant has observed an increase in public-facing serverless applications lacking authentication, often due to business needs.

Mozilla's investigation revealed that Stardust shared user data, linked to a unique identifier instead of a name, with RudderStack.

Hunt.io researchers discovered the intrusion campaign in June 2026, identifying 13 Hong Kong-based servers containing victim source code, exploit scripts, and operator logs.

The kernel-mode rootkit, Daxin, first documented in March 2022, was found operating on a compromised host in Taiwan in 2026.

Partnered Health confirmed that a cyberattack on June 23 compromised data from 21 clinics located in New South Wales, Victoria, Queensland, Western Australia, and the ACT.