Biztonsági szemle

Sergei Anatolyevich Filimonov and his alleged co-conspirators operated an extensive scheme starting in November 2023, which involved spoofing bank domains to obtain customer credentials, according to US authorities.

Researchers discovered more than 3,300 unique victims across 461 organizations.

How CIRCIA creates an information-sharing framework for private companies and the federal government.

The RAT employs a concealed loader and a worm that actively scans for exposed Android Debug Bridge (ADB) services to install itself on vulnerable devices.

The AI Cyber Defense Pilot will involve state, local, tribal, and territorial governments, along with critical infrastructure organizations like the Multi-State Information Sharing and Analysis Center (MS-ISAC).

The platform, developed by former military red team operators, systematically ingests threat reports from sources like CISA, Mandiant, and Microsoft.

The MikroTrick attack chain exploits two critical vulnerabilities: CVE-2026-67276, an SSH authentication bypass, and CVE-2026-86060, an SSH session privilege escalation.

The first vulnerability, CVE-2026-59346, is a critical integer-overflow flaw within the VMXNET3 virtual network adapter.

The Malagasy government has submitted two cybercrime bills to parliament, aiming to modernize the national cybercrime framework and ratify the UN Convention against Cybercrime (Hanoi Convention).

Attackers are actively exploiting two of the vulnerabilities and another 58 are more likely to be exploited, according to Microsoft.

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.