Biztonsági szemle

A patch bypass for a bug in the popular desktop emulator enables root-level privilege escalation and has no fix in sight.

This move comes less than a year after the United States banned Kaspersky products, out of the same fear that the company is under Russian government control.

Evolving threats and hybrid identity challenges keep Microsoft's Active Directory at risk.

Confirmation by South Korea's data protection agency that the AI chatbot sent data to TikTok's Chinese parent company has spurred a ban in that nation, and is again is calling into question DeepSeek's safety.

I've been a big fan of Ryan Benson's unfurl[1] tool since he released it a little over 5 years ago. Unfurl is a tool that can parse/decode URLs including things like embedded timestamps and IP addresses. It can be run in gui form...

Attackers target password spraying attacks on Microsoft 365 accounts to run account takeovers.

A new streaming series about a catastrophic, nationwide cyberattack against US critical infrastructure is about as believable as its main character: an honest, bipartisan, universally beloved politician.

Elon Musk's Department of Government Efficiency will continue to have no access to the Treasury Department's systems after Judge Jeannette Vargas of the U.S. District Court for the Southern District of New York upheld a temporary restraining order...

The U.S. Department of Health and Human Services has imposed a $1.5 million penalty on American eyewear manufacturer and retailer Warby Parker due to its failure to properly secure its systems from a credential stuffing attack in 2018 that...

Cisco Canada’s SMB organization, along with key partners, foster a ripple effect of kindness, breathing life into the Maya Angelou quote, “I have found that among its other benefits, giving liberates the soul of the giver.”

Ongoing attacks leveraging the recently patched high-severity code injection flaw in the Craft content management system, tracked as CVE-2025-23209, have prompted its inclusion in the Cybersecurity and Infrastructure Security Agency's Known Exploited...