Biztonsági szemle

Check Point Research has identified 6,843 new Amazon-themed domains registered between December and May, with nearly 10% flagged as malicious or suspicious.

The utility disclosed that names, addresses, email addresses, phone numbers, account and billing numbers, service addresses, pricing plans, contract start dates, and meter information may have been accessed.

Squidbleed allows an attacker to read beyond the boundary of a memory buffer within Squid's FTP parser.

Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access and exfiltrate sensitive data.

Attackers are bypassing MFA by targeting enrollment and trust workflows.

For Michelle Szklarska, achieving CCNA success allowed her to leave product ownership behind and transition to a role as a full-time network engineer.

Veeam's Shiva Pillay discusses ensuring data trust and contextualization for AI security.

Attackers are using multiple online channels — including GitHub, YouTube, and VirusTotal — to build an illusion of trust to spread a cross-platform clipboard hijacker.

SoftBank Corp. (“SoftBank”) has integrated Cisco Foundation AI’s Foundation-sec-1.1-8B-Instruct model into their Security Operations Center (SOC) triaging workflow, enabling full automation of suspicious software detection, dynamic policy...........

Nearly two-thirds of scam victims globally, or 64.5%, believe AI tools played a role in the fraud attempts.

Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.

Webshells have been popular for a long time. We already covered this topic across multiple diaries[ 1][ 2]. I spent some time to track them[ 3] and slighly paid less attention to them but today I found another one. It seems to be a new player (pushed...