Biztonsági szemle

Browser-based attacks using malware-laced downloads now usurp email-based ransomware attacks involving malicious executables, researchers say.

Threat actors could compromise encrypted virtual machines and facilitate privilege escalation efforts through the new CacheWarp attack involving the exploitation of a vulnerability impacting AMD's Secure Encrypted Virtualization technology, tracked...

BleepingComputer reports that more than 600,000 WordPress sites could have their databases compromised through the exploitation of a high-severity SQL injection vulnerability impacting the WP Fastest Cache plugin.

Vulnerable Citrix NetScaler ADC and Gateway servers impacted by the Citrix Bleed flaw, tracked as CVE-2023-4966, were noted by threat researcher Kevin Beaumont to have been targeted by the LockBit ransomware gang to facilitate its recent string of...

CyberScoop reports that governments across the Middle East have been targeted by persistent pro-Palestinian hacking group TA402, also known as Gaza Cybergang, WIRTE, Frankenstein, and Molerats, in cyberespionage attacks using the new IronWind initial...

Numerous European countries, particularly Greece, Azerbaijan, Romania, and Italy, had their international organizations and embassies subjected to a cyberespionage campaign by Russian state-sponsored threat operation APT29, also known as Blue Bravo...

Rackspace's 2022 ransomware attack only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack.

With a two-pronged approach, the group trains its hackers in penetration testing, only to set them free to build a marketplace for pen-testing services.

Organizations in "essential" sectors have until October 2024 to comply with the Network and Information Systems Directive 2022 (NIS2).

Cisco Partner Summit 2023 showed how Cisco and Cisco Partners truly are Greater Together.