Biztonsági szemle

Hugging Face turned to an open-weight model after being restricted by frontier model guardrails.

South Korea's proposed legislation seeks to amend the Criminal Procedure Act to accommodate the seizure of digital assets held in self-custody wallets, such as hardware wallets.

HollowGraph, believed to be part of the Cavern command-and-control framework, targets organizations in Israel for espionage purposes.

The incident involved an unidentified threat actor accessing Ecopetrol's IT infrastructure and exfiltrating pseudonymous data from 3,300 user accounts.

The breach, which occurred on July 20, saw a significant volume of file names viewed and exfiltrated by unauthorized individuals.

The vulnerability, with a CVSS score of 9.2, allows an unauthenticated attacker to trigger a heap buffer overflow by sending specially crafted HTTP requests.

Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop viability remain open questions.

The director of a key federal government AI testing lab, Chris Fall, is stepping down from his position just three months after taking the helm, according to a recent report by CyberScoop.

Marc Maiffret reflects on Code Red's legacy and the security lessons helping organizations navigate AI risk today.

Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider leaving their position.

"The TFF Trap" uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.

The SleeperGem attack utilizes three malicious Ruby gems: git_credential_manager, Dendreo, and fastlane-plugin-run_tests_firebase_testlab.