Biztonsági szemle

LevelBlue: CTOs see people — not technology — as the biggest cyber resilience challenge.

Evaluation should start with the operating problem your organization needs solved

Here’s how teams can prevent our industry’s next big crisis.

The attack chain begins when a victim pastes a command into their Terminal, often lured by a ClickFix page.

The White House launched Gold Eagle to coordinate vulnerability response in a new AI world, but multiple questions linger over how it's being implemented.

Google Cloud incorporates key Wiz capabilities into an agentic defense platform to automate threat detection and remediation against AI attacks.

The flaw allows an unauthenticated attacker to remotely compromise Oracle Payments.

The Sandworm group, linked to Russia's GRU, is employing the social engineering technique called ClickFix.

Mandiant has observed an increase in public-facing serverless applications lacking authentication, often due to business needs.

Mozilla's investigation revealed that Stardust shared user data, linked to a unique identifier instead of a name, with RudderStack.

Hunt.io researchers discovered the intrusion campaign in June 2026, identifying 13 Hong Kong-based servers containing victim source code, exploit scripts, and operator logs.

The kernel-mode rootkit, Daxin, first documented in March 2022, was found operating on a compromised host in Taiwan in 2026.