Biztonsági szemle

The SleeperGem attack utilizes three malicious Ruby gems: git_credential_manager, Dendreo, and fastlane-plugin-run_tests_firebase_testlab.

The GAO audit found that the FAA has only fully implemented three out of seven objectives for protecting agency networks, with critical areas like cyber monitoring, response, and the transition to zero-trust security remaining incomplete.

The application, costing $1.4 million, was mandated for use by the FAA and other federal employees.

The HelloNet campaign targets organizations using ViPNet, a Russian information-security product suite commonly used in government and regulated environments.

The HollowByte vulnerability, detailed by Okta's Red Team, exploits a flaw in how OpenSSL handles TLS handshake messages.

We put Diffie-Hellman and ML-KEM side by side on size, latency, compute, and security, and land on the smartest move: a hybrid key exchange that runs both and combines their secrets, so an attacker would have to break both at once.

The first incident was highlighted when the ShinyHunters extortion gang claimed to have accessed Abbott's internal legacy Exact Sciences systems in its Cancer Diagnostics business.

From the World Cup to the United States' 250th celebration, this year's event calendar has been packed with high-profile gatherings that drew global audiences, intense scrutiny, and enormous security demands.

The vulnerability requires physical access to an Android device and involves a specific multi-touch gesture.

The ViteVenom campaign, attributed to the threat actor SuccessKey, builds upon the tactics seen in the earlier ChainVeil attack.

Teams need to know what the AI did, why it was allowed, and what stopped it from doing something worse?

These capabilities may be impossible to contain, forcing defenders to contain their impact.