Biztonsági szemle

The enterprise resource planning platform bug CVE-2024-38856 has a vulnerability-severity score of 9.8 out of 10 on the CVSS scale and offers a wide avenue into enterprise applications for cyberattackers.

App developers can expect the government to crack down on companies that violate privacy rights – especially apps targeted towards children.

The APT used DNS poisoning to install the Macma backdoor on targeted networks and then deliver malware to steal data via post-exploitation activity.

Researchers from Graz University of Technology showed how the vulnerability worked across nine CVEs.

Cybersecurity startup LeakSignal, a finalist in this year's Black Hat USA Startup Spotlight competition, helps organizations see where data is leaking within their environments.

Cybersecurity startup Knostic, a finalist in this year's Black Hat USA Startup Spotlight competition, adds guardrails to how AI uses enterprise data to ensure sensitive data doesn't get leaked.

Aside from not implementing adequate safeguards to prevent sign-ups from children younger than 13 without parental consent until late 2020, TikTok also has a "convoluted" data deletion process and has not adhered to parents' requests to remove data...

Global UK-based immigration services provider Sable International had its customers emailed by the BianLian ransomware operation in a bid to pressure ransom payment following an advanced cyberattack that disrupted the firm's servers, website, and...

Intrusions leveraging the flaw against impacted modules on the 1756 chassis containing the devices' communication processors, controllers, and I/O modules could result in the execution of common industrial protocol commands enabling the alteration of...

Adopting a military mindset toward cybersecurity means the industry moves beyond the current network protection strategies and toward a data-centric security approach.

Included in the information leaked by the misconfigured databases were individuals' names, addresses, Social Security numbers, and other sensitive personally identifiable information, as well as ballot templates and other election records.

Intrusions, which were noted by BleepingComputer and ID-Ransomware to have increased in prevalence since July 20, were reported by some victims to have resulted in device encryption following the execution of cracked software and key generators.