Biztonsági szemle

Evo ADS addresses the challenge of securing AI agents that operate with limited human oversight by governing the tools they use, their actions during execution, and the code they generate.

Attackers can exploit the issue to disable security and integrated browser tools without needing administrator privileges or kernel exploits.

How AI agents extend a discipline once reserved for well-resourced teams to every security operations program.

In a previous diary, I talked about stack strings[ 1] with a practical example of them. Since my SEC670 class, I’m even more interested in malware obfuscation techniques. I had&...

The release of the Kea 3.2 branch includes a few changes users should know about when upgrading from Kea 3.0. If you are upgrading from a pre-3.0 version, please review the "Things to be aware of when upgrading to Kea 3.0.0" article first. The Kea...

Summary The Kea Control Agent (KCA) is deprecated in Kea 3.0, and has been removed as of Kea 3.2. The functions of the KCA are now fulfilled by the direct API access features of Kea 3.0 or later. This article provides guidance on migrating from the...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The most severe flaw, CVE-2026-41947, resides in Dify's tracing system, enabling attackers to create a persistent channel for exfiltrating all messages and responses from any accessible application without authentication.

As reported by CyberScoop, an Algerian national identified as Abdellah Belmili, also known online as “SPOX,” has been extradited from Spain to face charges in the U.S. for allegedly operating a significant cybercrime enterprise that defrauded...

The guilty pleas were entered by Thalha Jubair, 20, and Owen Flowers, 18, who are identified as key members of the cybercrime group Scattered Spider.

EmberAI operates on the Dragos Intelligence Fabric, which the company states is the largest OT cybersecurity data set, compiled from over a decade of adversary tracking and incident response.