Biztonsági szemle

The U.S. Department of Justice has announced the extradition of alleged BlackDB.cc cybercrime market lead administrator Liridon Masurica, months after his arrest in Kosovo.

At least 39 security flaws across several Adobe products have been fixed by the software vendor as part of this month's Patch Tuesday, SecurityWeek reports.

Intel's hardware-based safeguards against attacks exploiting the Spectre data leaking vulnerabilities impacting its processors could be bypassed by new Branch Predictor Race Conditions, reports The Register.

Updates have been issued by Fortinet to address a critical zero-day remote code execution vulnerability, tracked as CVE-2025-32756, which has already been leveraged to compromise FortiVoice enterprise phone systems, according to BleepingComputer.

The acquisition will enhance Orca's CNAPP offering with autonomous vulnerability remediation and prevention technologies from Opus.

While hacktivists claimed more than 100 successful attacks against Indian government, education, and military targets, the attacks were overblown in most cases and often did not even happen.

Browser fingerprinting and additional payload encryption are the most recent methods used.

Patches include five vulnerabilities actively targeted in the wild, as well as two others with public exploit code available.

Capital One executives share insights on how organizations should design their security programs, implement passwordless technologies, and reduce their attack surface.

Microsoft's May 2025 Patch Tuesday update also contains four other actively exploited zero-day security vulnerabilities, two publicly known bugs, and 12 critical patches.

Tidrone concentrated on military entities and the satellite sector, using their associated service providers and ERP software to infect not just drones but all the entities that are part of their supply chains.