Biztonsági szemle

Attacks enable PyPI software takeovers by re-registering packages upon their removal from the index, an analysis from JFrog showed.

Immediate incident response protocol adoption and network section takedowns were conducted following the discovery of the intrusion on Aug. 28, according to Planned Parenthood of Montana President and CEO Martha Fuller.

Combine the financial sector’s high online usage and need to make speedy decisions and it’s easy to understand why hackers use file-sharing services to prey on this vertical.

Such malicious JavaScript code — which is potentially targeted at exfiltrating the credentials of Cisco employees who usually use the site during the checkout process — may have been deployed through the exploitation of the critical XML external...

Intrusions commenced with a 20-second hit that reached up to 1.7 Gpps before the succeeding deployment of unprecedented Carpet Bomb attacks against the targeted network's subnet IPs the day after, according to Global Secure Layer researchers.

Attacks from a China-based command-and-control server involved MacroPack-based documents uploaded from China-, Taiwan-, and Pakistan-based IP addresses that ordered the installation of macros that facilitated Brute Ratel and Havoc distribution...

Aside from leveraging Telegram bot API to facilitate stealthier exfiltration of targeted devices' sensitive and personal data, Angry Stealer has also been enhanced with the "MotherRussia.exe" payload, which could enable further malicious activity.

Under the "Doppelganger" influence campaign, ANO Dialog, Structura National Technology, and the Social Design Agency have been ordered by Russian President Vladimir Putin's First Deputy Chief of Staff Sergei Kiriyenko to spread disinformation meant...

The NFL and Cisco have worked together to develop a playbook that is now coming to life across our partnership, leveraging the collective power of our industry-leading networking, security and observability expertise and solutions.

CISA released four Industrial Control Systems (ICS) advisory on September 5, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-249-01 Hughes Network Systems WL3000...

Summary The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU)...

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Low attack complexity Vendor: Hughes Network Systems Equipment: WL3000 Fusion Software Vulnerabilities: Insufficiently Protected Credentials, Missing Encryption of Sensitive Data 2. RISK...