Biztonsági szemle

Root.io offers agentic vulnerability remediation, utilizing AI agents to research, write, test, and deploy patches for newly published vulnerabilities within minutes.

The attack chain begins with a single line of Python code executed via an unauthenticated Langflow API endpoint.

IBM and Red Hat assign 20,000 engineers to the new Project Lightwell service as Anthropic's Mythos findings ignite debate over how to secure the open-source software supply chain.

Megjelent a SANS és a Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet közös kiadványának 2026. júliusi száma, melyben a mesterséges intelligenciával foglalkozunk. Bemutatjuk, hogy pontosan mi is az MI, milyen típusai vannak, valamint...

The campaign targets small businesses with fearmongering emails.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The "Google Notes" extension, identified by McAfee researchers, operates by requesting broad permissions, including access to all websites, browsing history, and the clipboard, which are unusual for a note-taking application.

The updates address critical flaws in WebKit, the rendering engine for Safari and other applications on Apple devices.

The Bitdefender 2026 Cybersecurity Assessment Report surveyed over 1,200 professionals across six countries.

Europol coordinated the operation, dubbed Ratatouille, which dismantled XSS.is, a forum with over 50,000 members.

ARToken operates as an affiliate of the EvilTokens phishing-as-a-service operation, which targets Microsoft 365 accounts and bypasses multi-factor authentication.

The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, prompting users to click an "Update" button.