Biztonsági szemle

Zscaler removed an internet-exposed test environment without any customer data following rumors that it was the company claimed to have been compromised by IntelBroker, according to BleepingComputer.

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: InfraSuite Device Master Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation...

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Historian SE Vulnerabilities: Missing Release of Resource after Effective Lifetime, Improper Check or...

CISA released four Industrial Control Systems (ICS) advisories on May 09, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-130-01 Rockwell Automation FactoryTalk...

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: alpitronic Equipment: Hypercharger EV charger Vulnerability: Use of Default Credentials 2. RISK EVALUATION Successful exploitation of this...

Today, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), together with CISA, the Canadian Centre for Cyber Security (CCCS), the United Kingdom’s National Cyber Security Centre (NCSC-UK), and the New Zealand National...

Over 60 companies have signed CIAS's Secure by Design pledge to consider security from the design phase and throughout the product life cycle.

For this year’s conference, attendees dug-in to how AI can help their security efforts today – and what’s on the horizon for tomorrow.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Instead of building a list of users and identifying what systems each use can access, Token Security starts with a list of machines and determining who can access each system.

An attacker accessed personal information of over 225,000 active, reserve, and former UK military members from third-party payroll processing system.

Iran follows in Russia's disinformation footsteps but with a different, more economical, and potentially higher-impact model.