Biztonsági szemle

The GAO audit found that the FAA has only fully implemented three out of seven objectives for protecting agency networks, with critical areas like cyber monitoring, response, and the transition to zero-trust security remaining incomplete.

The application, costing $1.4 million, was mandated for use by the FAA and other federal employees.

The HelloNet campaign targets organizations using ViPNet, a Russian information-security product suite commonly used in government and regulated environments.

The HollowByte vulnerability, detailed by Okta's Red Team, exploits a flaw in how OpenSSL handles TLS handshake messages.

The first incident was highlighted when the ShinyHunters extortion gang claimed to have accessed Abbott's internal legacy Exact Sciences systems in its Cancer Diagnostics business.

From the World Cup to the United States' 250th celebration, this year's event calendar has been packed with high-profile gatherings that drew global audiences, intense scrutiny, and enormous security demands.

The vulnerability requires physical access to an Android device and involves a specific multi-touch gesture.

The ViteVenom campaign, attributed to the threat actor SuccessKey, builds upon the tactics seen in the earlier ChainVeil attack.

These capabilities may be impossible to contain, forcing defenders to contain their impact.

Teams need to know what the AI did, why it was allowed, and what stopped it from doing something worse?

Microsoft has detailed two primary intrusion chains used by ACR Stealer.