Biztonsági szemle

The TaskWeaver loader delivers Djinn Stealer, which targets dev credentials and AI tokens.

The new username functionality enables users to set a unique handle and share that instead of their personal phone number when initiating conversations.

A security researcher, operating under the pseudonym "Srikanth L" and affiliated with CashlessConsumer, has alleged that the IDRBT's Domain Registration Portal, the exclusive registrar for India's .bank.in namespace, exposed over 33 unauthenticated...

Teams are dealing with a truly dangerous problem — automation that works, but that no one understands.

Apple released updates for iOS/iPadOS, macOS, and Safari on Monday. There have been no updates for other Apple operating systems (visionOS, watchOS, tvOS). Usually, Apple updates all products at the same time.

The transformer, introduced in a 2017 paper with the now-famous title "Attention Is All You Need," is the engine behind every major language model you have heard of. GPT, Claude, Gemini, Llama, Mistral. All transformer-based models. Understanding...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

ESET reported that Gamaredon conducted 35 distinct spear-phishing campaigns targeting Ukrainian governmental and military institutions in 2025, primarily in the latter half of the year.

The National Institute of Standards and Technology (NIST) scaled back on the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according to researchers.

Nissan Americas disclosed in a filing to the California Attorney General that a cyber event involving Oracle's personnel records led to the potential theft of payroll information, bank details, and Social Security numbers.

The StegoAd campaign employed steganography to hide malicious JavaScript within image and font files, making the extensions appear legitimate and functional.