Rubrika: Aktuálně

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source email solution, such as CVE-2024-42009 (CVSS score: 9.3), to siphon credentials,

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication. […]

Microsoft has begun testing the Cloud Rebuild recovery feature in the latest Windows 11 Insider Preview builds released for users in the Experimental channel. […]

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices‘ web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday. „An attacker can exploit this vulnerability, tracked as CVE-2026-11405, to bypass the password verification process

Česká verze oblíbeného Adobe Acrobat Reader-u po nedávných aktualizacích změnila terminologii a z kvalifikovaných elektronických podpisů udělala neexistující „prověřené elektronické podpisy“. Ty od I.CA navíc již nedokáže správně rozpoznat. Zde je zdroj