Security Bulletin
23 Oct 2025
Biztonsági szemle
The Best End User Security Awareness Programs Aren't About Awareness Anymore
The goal is to apply psychology principles to security training to change behaviors and security outcomes.
22 Oct 2025
Biztonsági szemle
It Takes Only 250 Documents to Poison Any AI Model
Researchers find it takes far less to manipulate a large language model's (LLM) behavior than anyone previously assumed.
22 Oct 2025
Biztonsági szemle
Too Many Secrets: Attackers Pounce on Sensitive Data Sprawl
Hardcoded credentials, access tokens, and API keys are ending up in the darnedest places, prompting a call for organizations to stop over-privileging secrets.
22 Oct 2025
Biztonsági szemle
WhatsApp Secures Ban on NSO Group After 6-Year Legal Battle
NSO Group must pay $4 million in damages and is permanently prohibited from reverse-engineering WhatsApp or creating new accounts after targeting users with spyware.
22 Oct 2025
Biztonsági szemle
The New Standard for Accurate Power Measurement in AI Data Centers
As AI raises the stakes for energy efficiency, precision is paramount. Discover how Cisco researchers have achieved a breakthrough in power measurement accuracy—paving the way for substantially smarter infrastructure decision-making.
22 Oct 2025
Biztonsági szemle
Future-Proof Your Wi-Fi Network with These Three AI-Driven Innovations
Discover how leading IT teams are transforming wireless networks with AI-driven intelligent automation, real-time optimization, and streamlined access control. Learn about the latest Cisco innovations that deliver seamless, secure, and reliable Wi-Fi...
22 Oct 2025
Biztonsági szemle
webctrl.cgi/Blue Angel Software Suite Exploit Attempts. Maybe CVE-2025-34033 Variant?, (Wed, Oct 22nd)
Starting yesterday, some of our honeypots received POST requests to "/cgi-bin/webctrl.cgi", attempting to exploit an OS command injection vulnerability:
22 Oct 2025
Biztonsági szemle
Russia Pivots, Cracks Down on Resident Hackers
Thanks to improving cybersecurity and law enforcement action from the West, Russia's government is reevaluating which cybercriminals it wants to give safe haven from the law.
22 Oct 2025
Biztonsági szemle
MuddyWater Targets 100+ Gov Entities in MEA With Phoenix Backdoor
The Iranian threat group is using a compromised mailbox accessed through NordVPN to send phishing emails that prompt recipients to enable macros.
22 Oct 2025
Biztonsági szemle
CVE-2025-8677: Resource exhaustion via malformed DNSKEY handling
CVE: CVE-2025-8677 Title: Resource exhaustion via malformed DNSKEY handling Document version: 2.0 Posting date: 22 October 2025 Program impacted: BIND 9 Versions affected: BIND 9.18.0 -> 9.18.39 9.20.0 -> 9.20.13 9.21.0 -> 9.21.12 BIND Supported...
22 Oct 2025
Biztonsági szemle
CVE-2025-40780: Cache poisoning due to weak PRNG
CVE: CVE-2025-40780 Title: Cache poisoning due to weak PRNG Document version: 2.0 Posting date: 22 October 2025 Program impacted: BIND 9 Versions affected: BIND 9.16.0 -> 9.16.50 9.18.0 -> 9.18.39 9.20.0 -> 9.20.13 9.21.0 -> 9.21.12 BIND Supported...
22 Oct 2025
Biztonsági szemle
CVE-2025-40778: Cache poisoning attacks with unsolicited RRs
CVE: CVE-2025-40778 Title: Cache poisoning attacks with unsolicited RRs Document version: 2.0 Posting date: 22 October 2025 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.16.50 9.18.0 -> 9.18.39 9.20.0 -> 9.20.13 9.21.0 -> 9.21.12 BIND...