Biztonsági szemle

Nihon Kotsu, a major player in Japan's transportation sector with annual revenues of approximately $1 billion, confirmed that its internal systems experienced unauthorized external access, identified as a malware infection.

The platform, active since 2020, allowed criminals to make over 1.8 million scam calls globally, targeting approximately 170,000 victims and causing tens of millions in financial losses.

Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks.

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki a Budapesti Műszaki és Gazdaságtudományi Egyetem nevében küldött, káros csatolmányt tartalmazó levéllel kapcsolatban. Intézetünkhöz több bejelentés is érkezett arról...

AI phishing kits outpace manual takedowns, forcing defenders to rethink strategy.

An additional flaw would allow an authenticated attacker with zero permissions to view cross-tenant metadata.

Precursor operates within the user's browser, streaming interaction signals to Cloudflare's edge servers for real-time analysis.

Security researchers at Varonis discovered flaws in Google Cloud's Dialogflow CX, a platform used for building chatbots.

The "Breach at the Beach" CTF, created by Varonis researchers Doron Kapah and Mark Vaitsman, simulates attacks within Entra ID, focusing on how threat actors exploit legitimate features, particularly non-human identities like AI agents and service...

The proposed regulations stem from a report by a panel of experts convened to address the harms associated with social media.

The attack, which occurred in December 2025, targeted Poland's power grid with the intent to disrupt communication between renewable energy hardware and power distribution operators.