Biztonsági szemle

On-premises SysAid IT support software instances have been impacted by a trio of XML External Entity injection vulnerabilities, tracked as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777.

REAL ID was regarded by Polyguard co-founder and CEO Joshua McKenty to be not only an extremely attractive target for cybercriminals but also a powerful surveillance tool.

Efforts to minimize the interruption have been immediately conducted by the airline's IT team.

Immediate activation of incident response and containment measures has been conducted upon discovery of the intrusion.

Widely used marketing software platform ClickFunnels has refuted an alleged data breach by the Satanic hacking group.

Intrusions with CoGUI commenced with the distribution of phishing emails urging immediate recipient action.

North Korean groups give away their intentions with common blunders and activity patterns.

Attackers could leverage the issue, which stems from OttoKit's 'create_wp_connection()' function, to facilitate privilege escalation.

This quick diary is a perfect example of why I love Linux (or UNIX in general) operating system. There is always a way to "escape" settings imposed by an admin...

Learn how COPPA compliance and Cisco’s security solutions help schools and libraries protect the online privacy of children while promoting a safer digital environment.

AI can automate the analysis, generation, testing, and reporting of exploits. It's particularly relevant in penetration testing and ethical hacking scenarios.

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Pixmeo Equipment: OsiriX MD Vulnerabilities: Use After Free, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful...