Biztonsági szemle

I spotted new Njrat[ 1] samples that (ab)use the Microsoft dev tunnels[ 2] service to connect to their C2 servers. This is a service that allows developers to expose local services to the Internet securely for testing, debugging, and collaboration...

Remote tools allow data exfiltration without leaving a footprint or recognizable malware payload.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

OSPS Baseline provides a starting point for project owners and adopters to understand an open source project's security posture by outlining all the controls that have been applied.

Feds reverse order and reinstate FDA staff critical to medical device safety less than a week after firing them.

The flaws in Microsoft Partner Center and Synacor Zimbra Collaboration Suite were added to the KEV catalog.

The threat group has a variety of tactics in its toolbox, including double extortion and ransomware-as-a-service.