Biztonsági szemle

The vulnerability stems from a race condition within the kernel's process integrity validation.

Criminals are compromising legitimate Airbnb host accounts, which have accumulated years of positive reviews and high ratings, to conduct scams.

A tool called FortigateSniffer abuses a diagnostic utility to continuously monitor network traffic.

Evo ADS addresses the challenge of securing AI agents that operate with limited human oversight by governing the tools they use, their actions during execution, and the code they generate.

Attackers can exploit the issue to disable security and integrated browser tools without needing administrator privileges or kernel exploits.

How AI agents extend a discipline once reserved for well-resourced teams to every security operations program.

In a previous diary, I talked about stack strings[ 1] with a practical example of them. Since my SEC670 class, I’m even more interested in malware obfuscation techniques. I had&...

The release of the Kea 3.2 branch includes a few changes users should know about when upgrading from Kea 3.0. If you are upgrading from a pre-3.0 version, please review the "Things to be aware of when upgrading to Kea 3.0.0" article first. The Kea...

Summary The Kea Control Agent (KCA) is deprecated in Kea 3.0, and has been removed as of Kea 3.2. The functions of the KCA are now fulfilled by the direct API access features of Kea 3.0 or later. This article provides guidance on migrating from the...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The most severe flaw, CVE-2026-41947, resides in Dify's tracing system, enabling attackers to create a persistent channel for exfiltrating all messages and responses from any accessible application without authentication.