Biztonsági szemle

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability These types of vulnerabilities are...

Ivanti has released a security update to address an admin bypass vulnerability ( CVE-2024-8963) affecting Ivanti Cloud Services Appliance (CSA) version 4.6. A cyber threat actor could exploit this vulnerability in conjunction with CVE-2024-8190...

The Coalition for Secure AI (CoSAI) has expanded its roster of members with the addition of threat intelligence management, collaboration, and response orchestration vendor Cyware.

What happened to KnowBe4 also has happened to many other organizations, and it's still a risk for companies of all sizes due to a sophisticated network of government-sponsored fake employees.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Hackers sent a convincing lure document, but after 20 years of similar attacks, the target organization was well prepared.

Since posting a diary about Vega-Lite [ 1], I have "played" with other queries that might be interesting and the first one that I wanted to explore since the DShield SIEM [ 2] capture and parse the iptables logs and store the Time-to-Live (TTL) for...

As the U.S. presidential elections near, foreign hackers are launching new campaigns against the candidates and their staffers.

Session hijacking is an emerging entry point for ransomware actors but few orgs invalidate open sessions after a malware infection.

By accessing the MSSQL, threat actors gain admin-level access to the application, allowing them to automate their attacks.

Thought to be Brazilian in origin, the remote access Trojan is the "perfect tool for a 21st-century James Bond."

Criminal actors are finding their niche in utilizing QR phishing codes, otherwise known as "quishing," to victimize unsuspecting tourists in Europe and beyond.