Biztonsági szemle

Widely used WordPress plugin RomethemeKit for Elementor was discovered to be affected by a critical security vulnerability, tracked as CVE-2025-30911, which could be leveraged to facilitate remote code execution, Infosecurity Magazine reports.

TechCrunch reports that operations of the almost identical mobile surveillance apps Cocospy, Spyzie, and Spyic have been halted.

Arbitrary file upload is made possible by a missing file type validation.

A cyber-espionage campaign is targeting Ukrainian government entities with a series of sophisticated spear-phishing attacks that exploit XSS vulnerabilities.

Incident underscores impact of third-party breaches on health organizations, security experts say.

The addition is an important hire for the No. 2 position at the cyber agency. The main director role remains unfilled post-Easterly, with Bridget Bean taking over acting duties for now.

The online service has since been shut down as the agency grapples with the cyberattack, though it assures the public that those most in need of legal assistance will still be able to access help.

If the Common Vulnerabilities and Exposures system continues to face uncertainty, the repercussions will build slowly, and eventually the cracks will become harder to contain.

If the Common Vulnerabilities and Exposures system continues to face uncertainty, the repercussions will build slowly, and eventually the cracks will become harder to contain.

Researchers have developed advanced detection methods to uncover abuse of Azure Managed Identities, shedding light on a growing security concern in cloud environments, reports Cyber Security News.

GBHackers News reports that the healthcare sector is experiencing a surge in cyberattacks, with 92% of organizations reporting breaches that exposed more than 276 million patient records, an average of 758,000 compromised daily.

A global CyberArk report highlights how the rapid integration of AI and cloud technologies is creating a new, identity-centric threat landscape, particularly through unmanaged machine identities with privileged access, according to Frontier...