Biztonsági szemle

The Gold Eagle initiative, established under a recent executive order promoting the secure use of advanced AI systems, brings together the White House, CISA, and the departments of Treasury and Defense with unnamed open-source software organizations...

The .me registry applied a serverHold status to the t.me domain, a registry-level action that prevents it from being published in the Domain Name System (DNS).

Security researchers at Stripe OLT discovered that version 7.0.18 of ModHeader included a hidden spyware SDK.

Iran allegedly abused Signaling System 7 (SS7), a set of protocols fundamental to 2G and 3G networks, to route calls and texts globally.

Simple age-old bugs give bad actors access to developers' secrets and source code-rich environments.

The malware is written in C++ and uses a signed and notarized dropper to evade Gatekeeper.

The West African country advanced rules to force organizations to disclose cyberattacks, joining other nations in a shift to mandated transparency.

CardinalOps will give Cribl customers the ability to map detection rules and security controls to the MITRE ATT&CK framework. SecOps teams can identify coverage gaps and operationalize threat intelligence.

These vulnerable UEFI applications, primarily older versions of the shim bootloader, can allow attackers to execute untrusted code during system startup, according to ESET researcher Martin Smolár.

The ransomware group D1R claimed to have accessed a database of 40,000 entries from Synopsys and subsequently used this information to target Bosch, alleging the theft of valuable intellectual property.

The hearing, the first of its kind in Brussels regarding advanced AI risks, focused on Anthropic's cyber-capable models, Mythos and Fable, which are capable of identifying and exploiting software vulnerabilities.