Security Bulletin

Planning ahead to defend against cyber threats is the work that keeps events uneventful.

A website framed as a game led AI assistants to submit private GitHub file contents.

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki, szabálysértési bírság megfizetésére kötelező, megtévesztő adathalász e-mailekkel kapcsolatban. Intézetünkhöz megnövekedett számú állampolgári bejelentés érkezett káros...

This morning, an interesting phishing email hit my mailbox. It targets Metamask[ 1], a cryptocurrency wallet, available as a browser extension and a mobile app, that lets users store, send, and receive crypto money. It&#x27s pretty popular, so a...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

"Agentjacking" is the latest demonstration of how easily attackers can exploit an AI agent's inability to differentiate between content and instructions.

Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

Leaders urge faster workforce adaptation as AI reshapes cyber and infrastructure.

Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.