Biztonsági szemle

Aside from not implementing adequate safeguards to prevent sign-ups from children younger than 13 without parental consent until late 2020, TikTok also has a "convoluted" data deletion process and has not adhered to parents' requests to remove data...

Global UK-based immigration services provider Sable International had its customers emailed by the BianLian ransomware operation in a bid to pressure ransom payment following an advanced cyberattack that disrupted the firm's servers, website, and...

Intrusions leveraging the flaw against impacted modules on the 1756 chassis containing the devices' communication processors, controllers, and I/O modules could result in the execution of common industrial protocol commands enabling the alteration of...

Cisco is pleased to announce Cisco Umbrella for Government has achieved the Federal Risk and Authorization Management Program FedRAMP® Moderate Authority to Operate (ATO).  Discover how it will help protect your government agency.

Adopting a military mindset toward cybersecurity means the industry moves beyond the current network protection strategies and toward a data-centric security approach.

Included in the information leaked by the misconfigured databases were individuals' names, addresses, Social Security numbers, and other sensitive personally identifiable information, as well as ballot templates and other election records.

Intrusions, which were noted by BleepingComputer and ID-Ransomware to have increased in prevalence since July 20, were reported by some victims to have resulted in device encryption following the execution of cracked software and key generators.

Deployed in an attack against a South American government's foreign ministry, the latest iteration of BITSLOTH has been integrated with 35 handler functions, as well as other enumeration, command-line execution, and discovery capabilities.

Attackers have been deploying BlankBot in the guise of utility apps, which when installed seek accessibility permissions for proper execution before performing an update that enables the acquisition of permissions for total device takeovers.

Aside from conducting the ongoing internet outage, which was proven by showing the takedown of most Iranian ministry websites, WeRedEvils also purported exfiltrating data from the impacted computer systems, which has already been given to the Israeli...

After conducting a DNS poisoning attack against the ISP, StormBamboo leveraged vulnerable HTTP software update mechanisms without digital signature validation to facilitate the installation of MACMA and MgBot malware to Windows and macOS systems.

Mark Weatherford, a seasoned cybersecurity professional with a distinguished career in both the public and private sectors, shares his perspectives on the evolving landscape of governance, risk management, and compliance (GRC).