Biztonsági szemle

Federal and state regulators have introduced new rules and mandates aimed at holding organizations accountable when it comes to cybersecurity. Here's how to get ready.

Mandiant warns that defenders must rethink how to thwart Chinese cyber-espionage groups now using professional "infrastructure-as-a-service" operational relay box networks of virtual private servers as well as hijacked smart devices and routers.

Microsoft, Google, OpenAI, and 13 other major artificial intelligence firms have committed to ensure safety and transparency in developing AI models at the AI Seoul Summit, The Associated Press reports.

The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include security issues impacting NextGen Healthcare Mirth Connect and Google Chrome instances, according to Security Affairs.

Updates have been issued by GitHub to remediate a maximum severity security vulnerability impacting its self-hosted software development platform GitHub Enterprise Server, tracked as CVE-2024-4985, which could be exploited to evade authentication...

Australia's Western Sydney University had information from nearly 7,500 students and academic staff compromised following a cyberattack against the university's Microsoft 365 environment, reports BleepingComputer.

U.S. mobile virtual network operator and the country's sole "Christian conservative wireless provider" Patriot Mobile had the personal information of its subscribers reportedly exposed following a data breach, according to TechCrunch.

BleepingComputer reports that Canadian pharmacy and retail chain London Drugs was admitted to have been breached by the LockBit ransomware group in an attack last month that resulted in the temporary closure of all its stores across Western Canada.

The severe security vulnerability (CVE-2024-4701, CVSS 9.9) gives remote attackers a way to burrow into Netflix's Genie open source platform, which is a treasure trove of information and connections to other internal services.

AI safety platform startup WitnessAI claims to help enterprises use AI safely and effectively with its platform addressing AI privacy, governance, and security.

As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.

Critics say the new Copilot+ PCs’ “photographic memory” could be exploited by threat actors.