Security Bulletin

The flaw allows an unauthenticated attacker to remotely compromise Oracle Payments.

Megjelent a 2026. 29. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2026.07.10. és 2026.07.16. között kezelt incidensek, valamint az elosztott kormányzati IT biztonsági csapdarendszerből (GovProbe1) származó adatok statisztikai eloszlását is...

Cisco Launches Johannesburg as its new 40 Communities destination and introduces Masibambisane, an initiative to revitalize the local community.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The Sandworm group, linked to Russia's GRU, is employing the social engineering technique called ClickFix.

Mandiant has observed an increase in public-facing serverless applications lacking authentication, often due to business needs.

Mozilla's investigation revealed that Stardust shared user data, linked to a unique identifier instead of a name, with RudderStack.

Hunt.io researchers discovered the intrusion campaign in June 2026, identifying 13 Hong Kong-based servers containing victim source code, exploit scripts, and operator logs.

The kernel-mode rootkit, Daxin, first documented in March 2022, was found operating on a compromised host in Taiwan in 2026.

Partnered Health confirmed that a cyberattack on June 23 compromised data from 21 clinics located in New South Wales, Victoria, Queensland, Western Australia, and the ACT.

A researcher, known as tokay0, detailed how a flawed policy attached to a certificate on Shark RV2320EDUS robot vacuums enables attackers to execute root commands on other Shark vacuums.

TELEPUZ is a lightweight and modular malware, likely developed by a small team and potentially offered as a malware-as-a-service.