Biztonsági szemle

The CI/CD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.

AI agents expose identity gaps as machine accounts outpace governance.

Identity solutions like Cross App Access (XAA) manage AI agents by enforcing policies, scoping access and logging activity.

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups such as the notorious Evil Corp.

The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign.

An attacker can use a crafted file to trigger a heap buffer overflow and overwrite a function pointer.

Here’s why the next social engineering wave won’t hit inboxes – it will just simply call employees on the phone.

The incident occurred early Saturday, June 20, when the Defesa Civil Nacional's dispatch platform was compromised.

A survey of over 7,800 individuals across eight countries revealed that between 40% and 50% of respondents still rely on browser-based password storage for convenience.

The phishing test email, sent during a period of intense work for healthcare professionals implementing the new CorCare software system, contained a button to claim an extra paid vacation day.