Biztonsági szemle

The exploit, detected by blockchain security firm Blockaid, involved an attacker creating fake cryptocurrency trading opportunities using fabricated pools and tokens.

The Federal Court granted CSIS the authority to access and alter infected servers, home routers, and Internet of Things (IoT) devices, including Ring doorbells and security cameras.

Senate testimony claims Anthropic's Mythos AI model breached NSA and Cyber Command systems in mere hours, leading to a US-ordered shutdown of the model.

The executive actions direct the government to support the quantum computing industry, building on previous efforts in artificial intelligence.

More victims have emerged after attackers breached application vendor Klue and used its OAuth tokens to steal customers' Salesforce data.

The CI/CD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.

AI agents expose identity gaps as machine accounts outpace governance.

Identity solutions like Cross App Access (XAA) manage AI agents by enforcing policies, scoping access and logging activity.

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups such as the notorious Evil Corp.

The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign.

An attacker can use a crafted file to trigger a heap buffer overflow and overwrite a function pointer.