@cyber-security ↑
zdroje:
#bleepingcomputer.com
#blog.google-TAG
#csirt.cz
#cyberscoop.com
#cybersecuritynews.com
#darkreading.com
#googleprojectzero.blogspot.com
#kratkespravy.sk
#krebsonsecurity.com
#linuxsecurity.com
#nakedsecurity.sophos.com
#nukib.cz
#scmagazine.com
#security.googleblog.com
#securityaffairs.co
#securityweek.com
#thehackernews.com
#therecord.media
#threatpost.com
#tripwire.com-state-of-security
bleepingcomputer.com
- Hackers plant 4G Raspberry Pi on bank network in failed ATM heist
- Apple patches security flaw exploited in Chrome zero-day attacks
- New Lenovo UEFI firmware updates fix Secure Boot bypass flaws
- AI Cuts vCISO Workload by 68% as Demand Skyrockets, New Report Finds
- Minnesota activates National Guard after St. Paul cyberattack
- Russian airline Aeroflot grounds dozens of flights after cyberattack
- Hackers exploit SAP NetWeaver bug to deploy Linux Auto-Color malware
- Microsoft Edge now an 'AI-powered browser' with Copilot Mode
- French telecom giant Orange discloses cyberattack
- FBI seizes $2.4M in Bitcoin from new Chaos ransomware operation
- How attackers are still phishing "phishing-resistant" authentication
- Lovense sex toy app flaw leaks private user email addresses
blog.google-TAG
- TAG Bulletin: Q2 2025
- TAG Bulletin: Q1 2025
- TAG Bulletin: Q4 2024
- TAG Bulletin: Q3 2024
- State-backed attackers and commercial surveillance vendors repeatedly use the same exploits
- Iranian backed group steps up phishing campaigns against Israel, U.S.
- Google disrupted over 10,000 instances of DRAGONBRIDGE activity in Q1 2024
- TAG Bulletin: Q2 2024
- A review of zero-day in-the-wild exploits in 2023
- TAG Bulletin: Q1 2024
- Tool of First Resort: Israel-Hamas War in Cyber
- Buying Spying: How the commercial surveillance industry works and what can be done about it
csirt.cz
- Závažná zranitelnost v IP kamerách LG Innotek LNV5110R umožňuje neautentizované vzdálené spuštění kódu (CVE-2025-7742)
- Více než 600 Laravel aplikací je zranitelných vůči vzdálenému spuštění kódu
- Závažné zranitelnosti v tiskárnách umožňují útočníkům obejít zabezpečení a převzít správu zařízení
- Dvě nové zranitelnosti v Linuxu umožňují snadné získání root přístupu
- Bezpečnostní analytik CSIRT.CZ objasnil principy phishingu v České televizi
- Postřehy z bezpečnosti: nařízení vlády k novému ZKB jsou v připomínkovém řízení
- Veškeré konverzace uživatelů s ChatGPT budou uchovávány. Včetně těch smazaných.
- Pozor na nový phishing cílící na uživatele Microsoft Planneru
- Závažná zranitelnost v Google Chrome
- Výzkumníci odhalili tisíce zneužitelných zařízení jsou mezi nimi i České
cyberscoop.com
- Palo Alto Networks to acquire CyberArk for $25 billion
- CISA is facing a tight CIRCIA deadline. Here’s how Sean Plankey can attempt to meet it
- Research shows data breach costs have reached an all-time high
- Minnesota governor activates National Guard amid St. Paul cyberattack
- CISA says it will release telecom security report sought by Sen. Wyden to lift hold on Plankey nomination
- Researchers flag flaw in Google’s AI coding assistant that allowed for ‘silent’ code exfiltration
- Sen. Hassan wants to hear from SpaceX about scammers abusing Starlink
- FBI alerts tie together threats of cybercrime, physical violence from The Com
- Hundreds of registered data brokers ignore user requests around personal data
- Microsoft’s software licensing playbook is a national security risk
cybersecuritynews.com
private- Threat Actors Allegedly Claim Access to Nokia’s Internal Network
- Palo Alto Networks to Acquire CyberArk in $25 Billion Deal
- 5 Email Attacks SOCs Cannot Detect Without A Sandbox
- Lazarus Subgroup ‘TraderTraitor’ Attacking Cloud Platforms and Poisoning Supply Chains
- Threat Actors Weaponize LNK Files With New REMCOS Variant That Bypasses AV Engines
- 15 Best Website Monitoring Tools in 2025
- Critical SonicWall SSL VPN Vulnerability Let Attackers Trigger DoS Attack on Firewalls
- WordPress Theme RCE Vulnerability Actively Exploited to Take Full Site Control
- Lumma Password Stealer Attack Infection Chain and Its Escalation Tactics Uncovered
- BeyondTrust Privilege Management for Windows Vulnerability Let Attackers Escalate Privileges
darkreading.com
- The CrowdStrike Outage Was Bad, but It Could Have Been Worse
- ChatGPT, GenAI Tools Open to 'Man in the Prompt' Browser Attack
- African Orgs Fall to Mass Microsoft SharePoint Exploits
- Nimble 'Gunra' Ransomware Evolves With Linux Variant
- Critical Flaw in Vibe-Coding Platform Base44 Exposes Apps
- The Hidden Threat of Rogue Access
- Supply Chain Attacks Spotted in GitHub Actions, Gravity Forms, npm
- Root Evidence Bets on New Concept for Vulnerability Patch Management
- Insurance Giant Allianz Life Grapples With Breach Affecting 'Majority' of Customers
- Chaos Ransomware Rises as BlackSuit Gang Falls
- Ghost Students Drain Money, Resources From Educational Sector
- New Risk Index Helps Organizations Tackle Cloud Security Chaos
googleprojectzero.blogspot.com
- Policy and Disclosure: 2025 Edition
- The Windows Registry Adventure #8: Practical exploitation of hive memory corruption
- The Windows Registry Adventure #7: Attack surface analysis
- Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
- The Windows Registry Adventure #6: Kernel-mode objects
- Blasting Past Webp
- Windows Bug Class: Accessing Trapped COM Objects with IDispatch
- Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
- The Windows Registry Adventure #5: The regf file format
kratkespravy.sk
- Zo sveta IT bezpečnosti, 6/2025
- Zo sveta IT bezpečnosti, 5/2025
- Zo sveta IT bezpečnosti, 4/2025
- Zo sveta IT bezpečnosti, 3/2025
- Zo sveta IT bezpečnosti, 2/2025
- Zo sveta IT bezpečnosti, 1/2025
- Zo sveta IT bezpečnosti, 12/2024
- Zo sveta IT bezpečnosti, 11/2024
- Zo sveta IT bezpečnosti, 10/2024
- Zo sveta IT bezpečnosti, 9/2024
krebsonsecurity.com
- Phishers Target Aviation Execs to Scam Customers
- Microsoft Fix Targets Attacks on SharePoint Zero-Day
- Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai
- DOGE Denizen Marko Elez Leaked API Key for xAI
- UK Arrests Four in ‘Scattered Spider’ Ransom Group
- Microsoft Patch Tuesday, July 2025 Edition
- Big Tech’s Mixed Response to U.S. Treasury Sanctions
- Senator Chides FBI for Weak Advice on Mobile Security
- Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
- Patch Tuesday, June 2025 Edition
linuxsecurity.com
- Hidden in Plain Sight: Koske Linux Malwares Stealthy Panda Image Delivery
- Soco404: Linux Cryptomining Campaign Masquerades as 404 Error Pages
- Debian 13 Trixie: RISC-V Support, Security Upgrades & A Bold Future
- SELinux vs. AppArmor: Uptake Trends & Security Considerations for Admins
- Ubuntu 25.04: Cloud-Init Critical Root Access Issues USN-7677-1
- Oracle Linux 10: ELSA-2025-12056 Perl Moderate Security Issue
- Oracle Linux 10 ELSA-2025-11933 sqlite Important Threat Fixed
- Oracle Linux 9 ELSA-2025-12083 ICU Moderate Buffer Overflow Fix
- Oracle Linux 9 ELSA-2025-11992 Security Advisory for SQLite CVE-2025-6965
- Oracle Linux 9 Advisory ELSA-2025-11861 Kernel Moderate DoS
nakedsecurity.sophos.com
- GOLD BLADE remote DLL sideloading attack deploys RedLoader
- Advancing cybersecurity for K-12 and libraries: Strategic considerations for the FCC Cybersecurity Pilot Program
- Sophos’ Secure by Design 2025 Progress
- Sophos captures multiple honors at SE Labs Awards 2025
- Beyond “Better Together”: Maximize your Microsoft 365 security with Sophos MDR
- Five fundamentals for a cyber-resilient future
- Small world: The revitalization of small AI models for cybersecurity
- SharePoint ‘ToolShell’ vulnerabilities being exploited in the wild
- Sophos announces UAE data center
- Sweet 16: Sophos named a Leader (again) in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
nukib.cz
- Vydali jsme Čtvrtletní přehled hrozeb NÚKIB Q2/2025
- Vydali jsme přehled kybernetických incidentů za červen 2025
- NÚKIB vydal Varování před některými produkty společnosti DeepSeek
- Nový zákon o kybernetické bezpečnosti byl podepsán prezidentem
- NÚKIB uspořádal další jednání skupiny kyberbezpečnostního výzkumu a inovací CYRIS
- Upozorňujeme na metodu „harvest now, decrypt later“
- Upozornění na možnou zvýšenou aktivitu kyberútočníků v souvislosti s EXPO 2025
- Upozorňujeme na zneužívání identit Amazon, Microsoft a státních institucí
- Upozornění na zvýšené riziko DDoS útoků během voleb do Evropského parlamentu
- Upozornění na kompromitaci routerů Ubiquity Edge OS aktérem sponzorovaným ruským státem
- Doporučení v oblasti kryptografických prostředků verze 3.0
- NÚKIB a Ministerstvo vnitra vydaly bezpečnostní doporučení pro vývoj otevřeného softwaru
scmagazine.com
-
[kanál neteče]
security.googleblog.com
-
[kanál neteče]
securityaffairs.co
- PyPI maintainers alert users to email verification phishing attack
- FBI seizes 20 BTC from Chaos Ransomware affiliate targeting Texas firms
- Critical SAP flaw exploited to launch Auto-Color Malware attack on U.S. company
- Orange reports major cyberattack, warns of service disruptions
- Hackers leak images and comments from women dating safety app Tea
- Pro-Ukraine hacktivists claim cyberattack on Russian Airline Aeroflot that caused the cancellation of +100 flights
- Seychelles Commercial Bank Reported Cybersecurity Incident
- Microsoft uncovers macOS flaw allowing bypass TCC protections and exposing sensitive data
- U.S. CISA adds Cisco ISE and PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog
- Critical WordPress Post SMTP plugin flaw exposes 200K+ sites to full takeover
securityweek.com
- Virtue AI Attracts $30M Investment to Address Critical AI Deployment Risks
- Industry Moves for the week of April 14, 2025 - SecurityWeek
- Insurance Firm Lemonade Says API Glitch Exposed Some Driver’s License Numbers
- Kidney Dialysis Services Provider DaVita Hit by Ransomware
- Conduent Says Names, Social Security Numbers Stolen in Cyberattack
- 2.6 Million Impacted by Landmark Admin, Young Consulting Data Breaches
- China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games
- Blockchain, Quantum, and IoT Firms Unite to Secure Satellite Communications Against Quantum Threats
- NetRise Raises $10 Million to Grow Software Supply Chain Security Platform
- Hertz Discloses Data Breach Linked to Cleo Hack
- CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security Officer at Adobe
thehackernews.com
- FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant
- Product Walkthrough: A Look Inside Pillar's AI Security Platform
- Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
- Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits
- Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
- Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero
- Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware
- Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure
- Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44
- PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain
- Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims
- How the Browser Became the Main Cyber Battleground
therecord.media
- Plankey nomination for CISA director advances to Senate floor
- Russia blocks popular US-made internet speed test tool over national security concerns
- IBM: Average cost of a data breach in US shoots to record $10 million
- Cyberattack shuts down hundreds of Russian pharmacies, disrupts healthcare services
- Palo Alto Networks to acquire identity security provider CyberArk in $25 billion deal
threatpost.com
- Student Loan Breach Exposes 2.5M Records
- Watering Hole Attacks Push ScanBox Keylogger
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
- Ransomware Attacks are on the Rise
- Cybercriminals Are Selling Access to Chinese Surveillance Cameras
- Twitter Whistleblower Complaint: The TL;DR Version
- Firewall Bug Under Active Attack Triggers CISA Warning
- Fake Reservation Links Prey on Weary Travelers
- iPhone Users Urged to Update to Patch 2 Zero-Days
- Google Patches Chrome’s Fifth Zero-Day of the Year
tripwire.com-state-of-security
- The Bullseye on Banks: Why Financial Services Remain a Prime Target for Cyberattacks
- SaaS Security in 2025: Why Visibility, Integrity, and Configuration Control Matter More Than Ever
- Why Agentic Security Doesn’t Mean Letting Go of Control
- Out-of-Band Update: Tripwire Enterprise 9.3.1
- Does Your Organization Need Deepfake Defenses?
- Securing Against Phishing Beyond Email
- Why Financial Websites Should Treat Web Application Firewalls Like Insurance
- Aligning Software Security Practices with the EU CRA Requirements
- OT Security in Ports: Lessons from the Coast Guard's Latest Warning
- 5 Critical Security Risks Facing COBOL Mainframes