Biztonsági szemle

In a previous diary, I talked about stack strings[ 1] with a practical example of them. Since my SEC670 class, I’m even more interested in malware obfuscation techniques. I had&...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The most severe flaw, CVE-2026-41947, resides in Dify's tracing system, enabling attackers to create a persistent channel for exfiltrating all messages and responses from any accessible application without authentication.

As reported by CyberScoop, an Algerian national identified as Abdellah Belmili, also known online as “SPOX,” has been extradited from Spain to face charges in the U.S. for allegedly operating a significant cybercrime enterprise that defrauded...

The guilty pleas were entered by Thalha Jubair, 20, and Owen Flowers, 18, who are identified as key members of the cybercrime group Scattered Spider.

EmberAI operates on the Dragos Intelligence Fabric, which the company states is the largest OT cybersecurity data set, compiled from over a decade of adversary tracking and incident response.

The State and Local Cybersecurity Grant Program, established in 2021, has been instrumental in helping state and local governments enhance their cybersecurity capabilities.

A new report from Omega Systems highlights a critical visibility gap in the healthcare digital supply chain.

The MCI program, launched in April, aimed to improve Meta's AI by analyzing employee interactions with computers, such as mouse movements and keyboard shortcuts.

The security incident, which occurred on January 20, 2026, allowed an unauthorized actor to acquire files containing sensitive information.

The breach was revealed after a hacker forum listed over 630 GB of data, reportedly containing more than 204,300 files.

The exploit, detected by blockchain security firm Blockaid, involved an attacker creating fake cryptocurrency trading opportunities using fabricated pools and tokens.