Biztonsági szemle

WMIC, a legacy command-line utility for interacting with Windows Management Instrumentation (WMI), has been progressively phased out.

The vulnerability, rated 9.4 under CVSS v4, was disclosed in November 2025 and allows attackers to exploit browsers like Firefox and Safari to achieve remote code execution (RCE) on a vulnerable Ray system.

CISA is currently acquiring these tools through the Continuous Diagnostics and Mitigation program and its Capacity Building arm.

The breach, which occurred on May 7, 2026, exposed the personal and financial information of potentially over 730,000 Texans, and affected individuals in Alabama, Tennessee, Georgia, and South Carolina.

The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more challenging to block attacks.

In the first purported "near-autonomous" attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise government agencies, likely in Taiwan.

As vulnerability discovery is industrialized, remediation must combine AI automation, environmental context and human expertise.

Researchers demonstrated this exploit chain on a Realme C33 smartphone, confirming its effectiveness on devices with specific Android security patches.

The seller, operating under the name TheHatman, advertised the data dump, titled "McDonalds 1.7M+ Azure Internal Employee Dump," on a forum.

The plaintiff in a case against the New York Bariatric Group reportedly embedded hidden instructions within a court filing, using white text in a 3-point font to conceal commands for any AI that might process the document.

A recent survey by Incogni reveals that over half of internet users believe their personal data will inevitably be exposed, leading to anxiety for 63% of respondents.