Magánszemélyeknek

The disclosed exploits include a critical pre-authentication remote code execution vulnerability in libssh2 (CVE-2026-55200) and an authentication bypass vulnerability in self-hosted Gitea Docker deployments (CVE-2026-20896), which allows attackers to impersonate users and take over Git servers.

Cyber threat intelligence provider WhoisXML API identified 212 newly registered domains referencing the Venezuela earthquake between June 24 and June 28, 2026.

Google threat hunters report that Russian influence campaigns are increasingly targeting the EU and NATO, aiming to divide Western coalitions and advance Moscow's political and military objectives.

The TaskWeaver loader delivers Djinn Stealer, which targets dev credentials and AI tokens.

The new username functionality enables users to set a unique handle and share that instead of their personal phone number when initiating conversations.

A security researcher, operating under the pseudonym "Srikanth L" and affiliated with CashlessConsumer, has alleged that the IDRBT's Domain Registration Portal, the exclusive registrar for India's .bank.in namespace, exposed over 33 unauthenticated API endpoints.

Teams are dealing with a truly dangerous problem — automation that works, but that no one understands.

ESET reported that Gamaredon conducted 35 distinct spear-phishing campaigns targeting Ukrainian governmental and military institutions in 2025, primarily in the latter half of the year.

The National Institute of Standards and Technology (NIST) scaled back on the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according to researchers.