Biztonsági szemle

More than 350 websites have been compromised as part of the sweeping 360XSS spam ads attack.

Such a weakness could be exploited to expose GitHub archives with sensitive corporate information.

By modernizing hiring, agencies can not only attract top talent but also bring much-needed stability and efficiency to the workforce.

More than 100 commands allowing multi-platform data compromise have been integrated into LightSpy.

Nearly 40 domains have been created to facilitate intrusions distributing the Vidar malware.

A host of automated approaches identifies and remediates potential vulns while still retaining a role for security analysts to filter for context and business criticality.

It's shockingly simple to turn a car dashcam into a powerful reconnaissance tool for gathering everyday routine and location data, researchers warn.

Learn how the SOC team supported Cisco Live Melbourne and some of the more interesting findings from four days of threat hunting on the network.

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dario Health Equipment: USB-C Blood Glucose Monitoring System Starter Kit Android Application, Application Database and Internet-based Server...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Communication modules for Modicon M580 and Quantum controllers Vulnerability: Out-of-bounds Write 2. RISK...

CISA released two Industrial Control Systems (ICS) advisories on February 27, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-058-01 Schneider Electric...

I spotted new Njrat[ 1] samples that (ab)use the Microsoft dev tunnels[ 2] service to connect to their C2 servers. This is a service that allows developers to expose local services to the Internet securely for testing, debugging, and collaboration...