Security Bulletin

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki a Microsoft szoftvereket érintő kritikus kockázati besorolású sérülékenységek kapcsán azok súlyossága, a szoftverek széleskörű elterjedtsége, valamint az egyes...

The RAT employs a concealed loader and a worm that actively scans for exposed Android Debug Bridge (ADB) services to install itself on vulnerable devices.

The AI Cyber Defense Pilot will involve state, local, tribal, and territorial governments, along with critical infrastructure organizations like the Multi-State Information Sharing and Analysis Center (MS-ISAC).

The platform, developed by former military red team operators, systematically ingests threat reports from sources like CISA, Mandiant, and Microsoft.

The MikroTrick attack chain exploits two critical vulnerabilities: CVE-2026-67276, an SSH authentication bypass, and CVE-2026-86060, an SSH session privilege escalation.

The first vulnerability, CVE-2026-59346, is a critical integer-overflow flaw within the VMXNET3 virtual network adapter.

The Malagasy government has submitted two cybercrime bills to parliament, aiming to modernize the national cybercrime framework and ratify the UN Convention against Cybercrime (Hanoi Convention).

Attackers are actively exploiting two of the vulnerabilities and another 58 are more likely to be exploited, according to Microsoft.

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.