Biztonsági szemle

The clipboard hijacker campaign also uses “ghost networks” on social media to boost engagement.

The Agentjacking attack bypasses the need for stolen credentials or direct network access.

The majority of attacks against these organizations were DDoS floods, with a notable difference in duration compared to attacks on Cloudflare's broader customer base.

The attack involved the theft of OAuth credentials from Klue's Battlecards integration, which threat actors then used to access and exfiltrate data from customer Salesforce instances.

Authorities from the Netherlands, Canada, the United States, and Germany removed the SocGholish malware and backdoors from 14,971 compromised WordPress websites, also taking 106 servers and domains offline.

The vulnerability, identified as CVE-2025-20701, was discovered by researchers Dennis Heinze and Frieder Steinmetz of ERNW GmbH.

The Shadowbyt3$ threat group claimed responsibility for the incident, alleging the exfiltration of sensitive employee data, including bank statements and W-9 forms.

The new ADX Vision for macOS targets the increasing use of unsanctioned generative AI tools within organizations.

The Texas Parks & Wildlife department disclosed that hackers gained access to its license system vendor, which processes hunting and fishing license sales.

Identiverse 2026 highlighted identity’s expanding role in AI, trust and governance.

A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem.

Cisco announces intent to acquire WideField Security, boosting Splunk's Agentic SOC with identity and session intelligence to secure AI agents at machine speed.