Biztonsági szemle

Mounting concerns regarding the operations of major data brokers in the U.S. have prompted House Energy and Commerce Committee Chair Cathy McMorris Rodger, R-Wash., and Senate Commerce, Science and Transportation Committee Chair Maria Cantwell, D...

SecurityWeek reports that more than 100 security vulnerabilities affecting several Juniper Networks products have been patched as part of dozens of advisories issued by the firm last week.

Attempted hijacking attacks similar to the recent compromise of the XZ Utils data compression project have been averted by OpenJS Foundation researchers, according to The Record, a news site by cybersecurity firm Recorded Future.

Operations of Russia's industrial sensor and monitoring infrastructure were claimed to have been disrupted by Ukrainian hacking operation Blackjack following a Fuxnet malware attack against Moscow-based underground infrastructure firm Moscollector...

Hackread reports that Miami-based geospatial intelligence company Space-Eyes was claimed to have been compromised by IntelBroker, which purportedly resulted in the exfiltration of the firm's sensitive data, including confidential U.S. national...

Attacks by the Muddled Libra threat operation — also known as UNC3944, Scattered Spider, Scatter Swine, and Starfraud — have been redirected at cloud service providers and software-as-a-service apps as part of efforts to bolster its data extortion...

More than 320 organizations in various sectors around the world, most of which are in Latin America, have been subjected to the new SteganoAmor attack campaign by the TA558 hacking operation that involved the use of steganography to enable the...

Five ways companies can move from SBOMs to SaaSBOMs to more effectively secure SaaS applications.

The “Crescendo” attack uses a chain of seemingly benign prompts to achieve an adverse output.

If left unpatched, the API flaw could let attackers bypass authentication, gain admin access, and steal company secrets.

The streaming service enables 2FA on all accounts following its second credential-stuffing attack this year.