Biztonsági szemle

Adversaries reusing abandoned package names sneak malware into organizations in a sort of software shell game.

Security pros say while side-channel attacks are difficult to pull off, the sheer volume of YubiKey devices in use makes the potential threat a real concern.

The ElectionGuard project allows anyone — voters, campaign staffers, and election officials — to cryptographically verify ballots, a promise that may bolster faith in election integrity.

Sophisticated social engineering is expected to accompany threat campaigns that are highly targeted and aimed at stealing crypto and deploying malware.

Aside from announcing the general availability of the Nozomi TI Expansion Pack Nozomi also unveiled new Vantage Threat Cards, which would enable improved data analysis from threat intelligence feeds through the Nozomi Vantage console.

Aside from facilitating the comprehensive gathering and exfiltration of device information ManticoraLoader, which could be rented for $500 a month, also features extensive obfuscation capabilities enabling evasion of the 360 Total Security sandboxing...

U.S. critical infrastructure entities were most targeted by the intrusions, with the UK, Germany, India, and Japan completing the five most hit countries, while a majority of the attacks were launched from China, Russia, and Iran, an analysis from...

Malicious posts on X, formerly Twitter, and its Iranian counterpart Virsaty have been leveraged by threat actors pretending to be Israeli human resource employees and headhunters to lure individuals experienced in cybersecurity and IT into providing...

Such a separation — which would restore intelligence, surveillance, and reconnaissance responsibilities to A2 alone while bringing in a three-star general to lead the new A6 command by next spring — aims to bolster Air Forces Cyber as sought by Air...

A proximity resilience graph offers a more accurate representation of risk than heat maps and risk registers, and allows CISOs to tell a complex story in a single visualization.

Clearview AI committed significant violations of the European Union’s General Data Protection Regulation after establishing the database without properly notifying individuals whose images were included, said the DPA, which could impose an additional...

Aside from pushing for risk-baed planning and data status monitoring among network operators, such guidance has also recommended the adoption and deployment of "current commercially-viable Internet routing security technologies" among service...