Biztonsági szemle

These groups suffered three times the cyberattacks as the year previous, with DDoS attacks dominating and vulnerability scans and SQL injection also more common.

A 2025. 24. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2025.06.06. és 2025.06.12. között kezelt incidensek statisztikai adatait is tartalmazza.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

[This is a Guest Diary by Michal Ambrozkiewicz, an ISC intern as part of the SANS.edu Bachelor's Degree in Applied Cybersecurity (BACS) program [1].]

The JavaScript obfuscation method produces working code using only six ASCII characters.

Researchers at Aim Security disclosed a Microsoft Copilot vulnerability of critical severity this week that could have enabled sensitive data exfiltration via prompt injection attacks.

New regulations and compliance standards for the Children's Online Privacy Protection Act reflect how much technology has grown since the Federal Trade Commission last updated it in 2013.

A string of threat-actor OpSec failures have yielded unexpected windfalls for security researchers and defenders.

The bad actor also established persistence following the incident.

If your visibility ends where their reconnaissance begins, you're exposed in ways you may not realize until it’s too late.

Here are six ways security teams can respond in the wake of the latest cyber EO.