Biztonsági szemle

When setting authentication token expiry policies, always lean in to security over employee convenience.

Cybersecurity researchers have uncovered a new attack method that they have dubbed LLMjacking, which targets cloud-hosted large language model services using stolen cloud credentials, after which attackers would attempt to sell the illegal access...

Brisbane-based mortgage lender Firstmac has become the latest Australian business to be targeted by cybercriminals, warning customers that it suffered a data breach a day after the new Embargo cyber-extortion group leaked over 500 GB of data...

More than 538,000 Ohio Lottery players have had their names and Social Security numbers compromised in a Christmas Eve data breach revealed this week in a regulatory filing by the state lottery, The Register reports.

Kaspersky's APT trends report for the first quarter highlighted the emergence of a new threat from the North Korean threat group Kimsuky, in the form of a new sophisticated malware named Durian, which the group has used in targeted cyber attacks...

Companies need to support their developers and coders need to double-down on the value of high-quality source code to the business.

Dell began notifying customers this week after database records surfaced on a cybercrime forum.

Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.

Enterprises are increasingly recognizing that a CISO's skills and experience building risk-based cyber programs translate well to other C-suite positions.

CISA's agreement is voluntary and, frankly, basic. Signatories say that's a good thing.

In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeling deepfakes and other artificial content.

In part 2, FortiGuard Labs' Derek Manky discusses cyberattacks via known vulnerabilities that have patches available, among other topics.