Блог

Articles about backups, disaster recovery, and security culture.

23.07.2026

New msaRAT Malware Hides Communications Inside Chrome and Edge.

New msaRAT Malware Hides Communications Inside Chrome and Edge. Cisco Talos researchers have documented a Rust-based backdoor called msaRAT, currently associated with attacks by the Chaos ransomware group. The malware launches Chrome or Microsoft Edge in headless mode and uses…

Източник: www.bleepingcomputer.com
19.07.2026

Public exploits are available for the WordPress “wp2shell” chain.

Public exploits are available for the WordPress “wp2shell” chain. Working proof-of-concept code has been released for two WordPress Core vulnerabilities that can be chained to execute code without authentication. CVE-2026-63030 involves confusion in the REST API batch-routing…

Източник: securityaffairs.com
08.07.2026

Spain arrests alleged supporter of pro-Russian hacktivist groups.

Spain arrests alleged supporter of pro-Russian hacktivist groups. Spanish police arrested a man suspected of helping pro-Russian hacktivist groups including CyberArmy of Russia Reborn, Z-Pentest, and NoName057(16). The investigation reportedly began with FBI information and…

Източник: therecord.media
06.07.2026

North Korean hackers are targeting open-source developers through PolinRider.

North Korean hackers are targeting open-source developers through PolinRider. SecurityWeek reported that North Korean-linked hackers are targeting open-source developers with a campaign called PolinRider. According to Socket’s findings cited in the report, the campaign has…

Източник: www.securityweek.com
05.07.2026

FortiBleed campaign hits UK government credentials.

FortiBleed campaign hits UK government credentials. Russian-speaking cybercriminals reportedly stole UK government login credentials and offered them for sale on dark-web forums. The affected accounts reportedly include Foreign Office-related users and local government staff…

Източник: www.thesun.co.uk
04.07.2026

“Bad Epoll” Linux kernel flaw can give local users root.

“Bad Epoll” Linux kernel flaw can give local users root. A newly disclosed Linux kernel vulnerability, CVE-2026-46242, called Bad Epoll, allows an unprivileged local user to gain root on affected Linux systems and potentially Android. The flaw is a use-after-free race condition…

Източник: thehackernews.com
04.07.2026

North Korean hackers push 108 malicious packages and browser extensions.

North Korean hackers push 108 malicious packages and browser extensions. North Korean threat actors linked to the “Contagious Interview” campaign have published 108 malicious packages and extensions across npm, Packagist, Go, and Chrome. The campaign, called PolinRider, targets…

Източник: thehackernews.com
03.07.2026

Google and FBI disrupt the NetNut/Popa residential proxy network.

Google and FBI disrupt the NetNut/Popa residential proxy network. Google said it worked with the FBI, Lumen, and other partners to disrupt NetNut, also known as Popa, a residential proxy network estimated by Google Threat Intelligence Group at at least 2 million devices…

Източник: cloud.google.com
02.07.2026

Germany plans to let intelligence agencies hack and disrupt foreign attackers.

Germany plans to let intelligence agencies hack and disrupt foreign attackers. Reuters reports that Germany is preparing a draft law that would give its spy agencies broader powers to hack, disrupt, and deceive foreign cyber attackers. The proposal would allow agencies, under…

Източник: www.reuters.com
28.06.2026

FBI and CISA warn that Russian hackers now target Signal backup keys.

FBI and CISA warn that Russian hackers now target Signal backup keys. The FBI and CISA updated their warning about a Russian intelligence-linked phishing campaign targeting Signal users. The campaign now tries to trick victims into handing over Signal Backup Recovery Keys, which…

Източник: www.bleepingcomputer.com
27.06.2026

FBI and CISA warn that Russian intelligence is targeting messaging-app backup keys.

FBI and CISA warn that Russian intelligence is targeting messaging-app backup keys. The FBI and CISA updated their warning about Russian intelligence services targeting commercial messaging applications. The agencies said the campaign targets current and former U.

Източник: www.ic3.gov
26.06.2026

Cybersecurity firms targeted with fake OpenAI organization invites.

Cybersecurity firms targeted with fake OpenAI organization invites. Threat actors are creating fraudulent OpenAI tenants that impersonate real companies and then inviting employees to join them. Push Security found the campaign after its staff received legitimate-looking OpenAI…

Източник: www.bleepingcomputer.com
25.06.2026

Europol and Microsoft disrupt SocGholish, Amadey, and StealC malware networks.

Europol and Microsoft disrupt SocGholish, Amadey, and StealC malware networks. Europol, Microsoft, and international law-enforcement partners disrupted infrastructure behind three major cybercrime-as-a-service operations: SocGholish, Amadey, and StealC. The operation dismantled…

Източник: therecord.media
23.06.2026

OpenAI expands Daybreak cybersecurity tools for patching vulnerabilities.

OpenAI expands Daybreak cybersecurity tools for patching vulnerabilities. OpenAI announced an expansion of its Daybreak cybersecurity initiative, including updates to Codex Security, GPT-5. 5-Cyber, a partner program, and the Patch the Planet initiative for open-source projects.

Източник: openai.com
23.06.2026

FFmpeg “PixelSmash” flaw enables remote code execution.

FFmpeg “PixelSmash” flaw enables remote code execution. Security researchers disclosed a vulnerability in FFmpeg’s libavcodec library, tracked as CVE-2026-8461. The flaw affects media-processing software and can be triggered with crafted video files.

Източник: www.securityweek.com
22.06.2026

Five Eyes agencies warn that frontier AI could sharply accelerate cyber threats.

Five Eyes agencies warn that frontier AI could sharply accelerate cyber threats. Cybersecurity and intelligence agencies from Australia, the United States, the United Kingdom, Canada, and New Zealand issued a rare joint warning that advanced AI models could transform both…

Източник: www.theguardian.com
21.06.2026

Critical Splunk Enterprise RCE remains an urgent patch issue.

Critical Splunk Enterprise RCE remains an urgent patch issue. CVE-2026-20253, a critical Splunk Enterprise vulnerability, remains a major issue today because CISA ordered U. S.

Източник: www.helpnetsecurity.com
20.06.2026

Suspected hacker triggers unauthorized emergency alert across Brazil.

Suspected hacker triggers unauthorized emergency alert across Brazil. Brazil’s government suspects that a hacking attack caused an unauthorized alert to be sent to cell phones in several states early Saturday. The country’s National Protection and Civil Defense Secretariat said…

Източник: www.reuters.com
19.06.2026

Splunk Enterprise flaw is being actively exploited.

Splunk Enterprise flaw is being actively exploited. CISA warned that CVE-2026-20253, a critical Splunk Enterprise vulnerability, is being exploited in attacks and ordered U. S.

Източник: www.bleepingcomputer.com
18.06.2026

Rokarolla Android banking trojan targets bank and crypto apps.

Rokarolla Android banking trojan targets bank and crypto apps. SecurityWeek reported on Rokarolla, a new Android banking trojan capable of targeting more than 200 banking and cryptocurrency applications. The malware is distributed through malicious websites and disguised as…

Източник: www.securityweek.com
15.06.2026

Anthropic and U.S. officials meet over export curbs on cybersecurity AI models.

Anthropic and U. S. officials meet over export curbs on cybersecurity AI models.

Източник: www.reuters.com
14.06.2026

152 Chrome extensions exposed for hidden tracking and fake search traffic.

152 Chrome extensions exposed for hidden tracking and fake search traffic. Researchers reported that 152 “live wallpaper” Chrome extensions were secretly logging user data and generating fake Google organic-search traffic. The extensions were spread across 38 publisher accounts…

Източник: cybersecuritynews.com
13.06.2026

Chinese hackers reportedly stayed inside an isolated network for 10 years.

Chinese hackers reportedly stayed inside an isolated network for 10 years. Chinese cyber-espionage group Velvet Ant allegedly compromised a large organization’s authentication stack and maintained persistence for a decade. The campaign, called “Operation Highland,” began with…

Източник: www.bleepingcomputer.com
11.06.2026

CISA sets a 3-day patch deadline for the most dangerous exploited flaws.

CISA sets a 3-day patch deadline for the most dangerous exploited flaws. The U. S.

Източник: therecord.media
09.06.2026

Google patches actively exploited Chrome V8 zero-day.

Google patches actively exploited Chrome V8 zero-day. Google released emergency Chrome updates for CVE-2026-11645, a high-severity V8 JavaScript engine vulnerability exploited in the wild. BleepingComputer reported that this was the fifth Chrome zero-day patched by Google in…

Източник: www.bleepingcomputer.com
08.06.2026

WhatsApp says NSO violated a no-hacking court order.

WhatsApp says NSO violated a no-hacking court order. WhatsApp said it detected and disrupted a spear-phishing attempt linked to spyware company NSO Group. The company says the activity violated a permanent injunction barring NSO from targeting WhatsApp and its users.

Източник: www.securityweek.com
07.06.2026

Instagram password reset flaw exposed user emails and phone numbers.

Instagram password reset flaw exposed user emails and phone numbers. Cyber Security News reported that Instagram fixed a logic bug in its web-based password reset flow after unredacted recovery emails and phone numbers were exposed.

Източник: cybersecuritynews.com
06.06.2026

AI agent finds 21 FFmpeg zero-days; Chrome ships record 429 security fixes.

AI agent finds 21 FFmpeg zero-days; Chrome ships record 429 security fixes. A security startup reportedly used an autonomous AI agent to find 21 previously unknown vulnerabilities in FFmpeg, the media library used across many video-processing systems. Separately, Google shipped…

Източник: thehackernews.com
05.06.2026

Google Chrome 149 patches a record 429 vulnerabilities.

Google Chrome 149 patches a record 429 vulnerabilities. Google released Chrome 149 with fixes for 429 vulnerabilities, described as a record number for a single Chrome update. More than 100 of the flaws are critical or high severity, with many involving use-after-free bugs and…

Източник: www.securityweek.com
04.06.2026

Massive cybercrime takedown disrupts 1.

Massive cybercrime takedown disrupts 1. 4 million scam accounts. Law enforcement agencies and major tech companies disrupted more than 1.

Източник: www.securityweek.com
03.06.2026

Global stock exchange targeted in months-long email espionage campaign.

Global stock exchange targeted in months-long email espionage campaign. Researchers from Symantec and Carbon Black reported that an unknown actor gained long-running access to a senior executive’s mailbox at an unnamed global stock exchange. The attacker reportedly exfiltrated…

Източник: www.darkreading.com
03.06.2026

HTTP/2 Bomb exploit can knock major web servers offline.

HTTP/2 Bomb exploit can knock major web servers offline. Security researchers disclosed “HTTP/2 Bomb,” a denial-of-service attack chain that combines HTTP/2 header compression abuse with Slowloris-style memory exhaustion. SecurityWeek reports that default configurations of NGINX…

Източник: www.securityweek.com
02.06.2026

Google patches Android zero-day exploited in targeted attacks.

Google patches Android zero-day exploited in targeted attacks. Google released the June 2026 Android Security Bulletin, covering vulnerabilities fixed by the 2026-06-05 patch level. The bulletin notes that CVE-2025-48595 may be under limited, targeted exploitation.

Източник: source.android.com
31.05.2026

Dutch authorities dismantle botnet of 17 million infected devices.

Dutch authorities dismantle botnet of 17 million infected devices. Dutch police and the Dutch National Cyber Security Centre disrupted a large botnet made up of at least 17 million infected devices, including computers, tablets, smartphones and IoT devices. More than 200 servers…

Източник: www.ncsc.nl
29.05.2026

Russian-linked GREYVIBE targeted Ukraine with AI-assisted cyberattacks.

Russian-linked GREYVIBE targeted Ukraine with AI-assisted cyberattacks. Researchers described a previously undocumented threat actor named GREYVIBE, active against Ukraine and Ukraine-related entities since at least August 2025. The group is assessed as Russian-speaking and…

Източник: thehackernews.com
28.05.2026

Carnival confirms data breach affecting nearly 6 million people.

Carnival confirms data breach affecting nearly 6 million people. Carnival Corporation confirmed a data breach affecting 5,995,277 people after attackers gained access to an employee account through social engineering. The company said unauthorized activity was identifie

Източник: www.securityweek.com
27.05.2026

FBI warns Silent Ransom Group is sending people in person to steal data.

FBI warns Silent Ransom Group is sending people in person to steal data. The FBI warned that Silent Ransom Group, also known as Luna Moth, Chatty Spider, and UNC3753, is targeting U. S.

Източник: www.bleepingcomputer.com
27.05.2026

CISA urges urgent patching of exploited LiteSpeed cPanel plugin zero-day.

CISA urges urgent patching of exploited LiteSpeed cPanel plugin zero-day. CISA warned federal agencies to patch CVE-2026-48172, a critical LiteSpeed user-end plugin vulnerability for cPanel that has already been exploited in the wild. The flaw can allow attackers to execute…

Източник: www.securityweek.com
26.05.2026

Lithuania Investigates Massive National Register Data Leak.

Lithuania Investigates Massive National Register Data Leak. Lithuanian authorities are investigating a leak of more than 600,000 entries from national registers, mainly real estate and legal-entity records. Prosecutors said the data was accessed using credentials of institutions…

Източник: www.securityweek.com
25.05.2026

A coordinated campaign called TrapDoor targeted three major developer ecosystems: npm, PyPI, and Crates.

A coordinated campaign called TrapDoor targeted three major developer ecosystems: npm, PyPI, and Crates. io. Researchers reported more than 34 malicious packages across over 384 versions, aimed especially at crypto, DeFi, Solana, and AI developers.

Източник: thehackernews.com
24.05.2026

Google exposed details of an unfixed Chromium flaw, while Chrome also received critical security fixes.

Google exposed details of an unfixed Chromium flaw, while Chrome also received critical security fixes. BleepingComputer reported that Google accidentally exposed details of an unfixed Chromium issue involving background JavaScript execution even after the browser is closed…

Източник: www.bleepingcomputer.com
24.05.2026

Megalodon supply-chain attack hit more than 5,500 GitHub repositories.

Megalodon supply-chain attack hit more than 5,500 GitHub repositories. Researchers disclosed a mass CI/CD attack called Megalodon, where attackers pushed 5,718 malicious commits into 5,561 GitHub repositories in about six hours. The malicious workflows were designed to steal…

Източник: www.stepsecurity.io
24.05.2026

Microsoft Defender vulnerabilities are being exploited in the wild.

Microsoft Defender vulnerabilities are being exploited in the wild. Attackers are exploiting two Microsoft Defender flaws: CVE-2026-41091 and CVE-2026-45498. One can allow local privilege escalation, while the other can cause denial of service; Microsoft fixed them in updated…

Източник: www.helpnetsecurity.com
24.05.2026

Anthropic says Project Glasswing found more than 10,000 serious vulnerabilities.

Anthropic says Project Glasswing found more than 10,000 serious vulnerabilities. Anthropic reported that its defensive AI initiative, Project Glasswing, has helped identify over 10,000 high- or critical-severity vulnerabilities in important open-source and foundational software…

Източник: www.anthropic.com
24.05.2026

Drupal Core SQL injection is now under active exploitation.

Drupal Core SQL injection is now under active exploitation. CISA added CVE-2026-9082 to its Known Exploited Vulnerabilities catalog after reports of real-world exploitation. The bug affects Drupal Core’s database abstraction layer, especially PostgreSQL-backed installations, and…

Източник: thehackernews.com
23.05.2026

Reported NGINX “poolslip” flaw raises concern for web infrastructure.

Reported NGINX “poolslip” flaw raises concern for web infrastructure. Cyber Security News reported a newly disclosed nginx-poolslip issue affecting NGINX rewrite-module behavior and memory-pool handling. The report says crafted HTTP requests can trigger a heap buffer overflow in…

Източник: cybersecuritynews.com
22.05.2026

China-linked Webworm campaign targets European government organizations.

China-linked Webworm campaign targets European government organizations. Dark Reading reports that the China-aligned Webworm APT has shifted toward European government targets, including organizations in Belgium, Italy, Serbia, Spain, and Poland. The group is using stealthier…

Източник: www.darkreading.com
22.05.2026

Trend Micro warns of an exploited Apex One zero-day.

Trend Micro warns of an exploited Apex One zero-day. Trend Micro patched CVE-2026-34926, a directory-traversal flaw in Apex One on-premise servers, after observing at least one exploitation attempt in the wild. The bug requires the attacker to already have admin-level access to…

Източник: www.bleepingcomputer.com
21.05.2026

Nine-year-old Linux kernel flaw disclosed with root-execution risk.

Nine-year-old Linux kernel flaw disclosed with root-execution risk. Researchers disclosed CVE-2026-46333, a Linux kernel vulnerability introduced in 2016 and now branded “ssh-keysign-pwn. ” The flaw can allow an unprivileged local user to disclose sensitive files and execute…

Източник: thehackernews.com
21.05.2026

Chinese-linked cyber-espionage campaign targets telecoms with Linux and Windows malware.

Chinese-linked cyber-espionage campaign targets telecoms with Linux and Windows malware. Researchers disclosed details of a campaign using Linux malware called Showboat and Windows malware called JFMBackdoor against telecommunications targets. Reporting links the activity to…

Източник: www.bleepingcomputer.com
21.05.2026

International police dismantle “First VPN,” a service used by ransomware actors.

International police dismantle “First VPN,” a service used by ransomware actors. Eurojust said French and Dutch authorities, supported by Eurojust and Europol, shut down the criminal VPN service First VPN after a coordinated action on May 19–20. Authorities dismantled more than…

Източник: www.eurojust.europa.eu
21.05.2026

Microsoft Defender zero-days are being exploited in the wild.

Microsoft Defender zero-days are being exploited in the wild. Microsoft released fixes for two actively exploited Defender vulnerabilities: CVE-2026-41091, a privilege-escalation flaw that can give attackers SYSTEM privileges, and CVE-2026-45498, a denial-of-service flaw…

Източник: www.bleepingcomputer.com
21.05.2026

GitHub internal repositories breached via poisoned VS Code extension.

GitHub internal repositories breached via poisoned VS Code extension. GitHub confirmed that an employee device was compromised through a malicious third-party VS Code extension, leading to unauthorized access to internal repositories. The attacker’s claim of about 3,800…
22.04.2026

Българската национална телевизия съобщи за DDoS атака срещу своята инфраструктура.

Българската национална телевизия съобщи за DDoS атака срещу своята инфраструктура. На 22 април Българската национална телевизия съобщи, че от 10:00 часа сутринта до малко преди обедната емисия новини е била обект на DDoS атака.
15.04.2026

Кибератака с руска следа засегна и български държавни структури.

Кибератака с руска следа засегна и български държавни структури. Мащабна кибершпионска кампания е засегнала имейл акаунти на военни и държавни структури в Украйна, както и в няколко страни от НАТО и Балканите, сред които и България. Според данни, цитирани от Reuters
31.03.2026

Пробив в Europaeu: какво всъщност се е случило.

Пробив в Europaeu: какво всъщност се е случило. Европейската комисия съобщи, че на 24 март 2026 г. е открила кибератака, засегнала част от облачната инфраструктура, която поддържа уеб присъствието ѝ в платформата Europa.
18.03.2026

Темата за „дигиталните призраци“ поставя фокус върху стари акаунти и слаби пароли В днешни публикации за киберсигурност във фокуса влезе проблемът с т.

Темата за „дигиталните призраци“ поставя фокус върху стари акаунти и слаби пароли В днешни публикации за киберсигурност във фокуса влезе проблемът с т. нар. „дигитални призраци“ – стари, неактивни или забравени акаунти, които продължават да съществуват в организационните системи.
13.03.2026

България остава предпоследна в Европейския съюз по дял на потребителите на електронни административни услуги, сочат нови данни на Евростат, публикувани чрез БТА.

България остава предпоследна в Европейския съюз по дял на потребителите на електронни административни услуги, сочат нови данни на Евростат, публикувани чрез БТА. През 2025 г. 71,9% от икономически активните жители на ЕС на възраст между 16 и 74 години са използвали през…
20.02.2026

AmCham Bulgaria Hackathon 2026 – обявени срокове и формат.

AmCham Bulgaria Hackathon 2026 – обявени срокове и формат. Физико-технологичният факултет на ПУ „Паисий Хилендарски“ публикува информация за AmCham Bulgaria Hackathon 2026. В текста се посочва периодът 13 март – 30 април 2026 г.
20.02.2026

Парламентът прие промени в Закона за киберсигурност.

Парламентът прие промени в Закона за киберсигурност. БНР съобщава, че Народното събрание е приело на второ четене промени в Закона за киберсигурност. В новината се посочва, че измененията са свързани с транспониране на европейски изисквания и актуализация на рамката за защита на…
20.02.2026

Георги Шарков встъпи в длъжност като министър на електронното управление.

Георги Шарков встъпи в длъжност като министър на електронното управление. На 19 февруари 2026 г. БНТ съобщава, че Георги Шарков е встъпил в длъжност като министър на електронното управление.
14.02.2026

Уязвими IP-камери и домашни устройства с фабрични настройки.

Уязвими IP-камери и домашни устройства с фабрични настройки. Проверка на публични каталози за компрометирани камери показва милиони потенциално уязвими устройства по света, като в публикацията се посочват и хиляди засечени в София. Акцентът е върху това, че много устройства…
13.02.2026

МВР: камерите в козметични салони като „охрана“ са проблем; проверяват се данни за над 200 потърпевши.

МВР: камерите в козметични салони като „охрана“ са проблем; проверяват се данни за над 200 потърпевши. По информация от днес разследването за нерегламентирано видеонаблюдение в козметични салони в Бургас и областта се разширява. Съобщава се, че броят на установените потърпевши…
12.02.2026

В парламента обсъдиха мерки за по-силен капацитет на КЗЛД и превенция при течове на видеосъдържание.

В парламента обсъдиха мерки за по-силен капацитет на КЗЛД и превенция при течове на видеосъдържание. След изслушване по казуса със злоупотреби с камери за видеонаблюдение бяха представени предложения за подпомагане на Комисията за защита на личните данни. В публикации се посочва…
11.02.2026

Събития: AI Innovation Summit 2026 е насрочен за 25 февруари в София.

Събития: AI Innovation Summit 2026 е насрочен за 25 февруари в София. Публикувана е информация за провеждането на AI Innovation Summit 2026. Събитието е обявено за 25 февруари 2026 г.
11.02.2026

„Паролите по подразбиране са покана за пробив“: експертен разговор за домашни и бизнес устройства, включително видеонаблюдение.

„Паролите по подразбиране са покана за пробив“: експертен разговор за домашни и бизнес устройства, включително видеонаблюдение. Материалът обобщава участие на киберексперт в радио предаване по повод Международния ден за безопасен интернет. Централният акцент е, че…
11.02.2026

Vivacom предупреждава за нов тип интернет измама чрез масово изпращане на SMS-и.

Vivacom предупреждава за нов тип интернет измама чрез масово изпращане на SMS-и. Компанията съобщава за схема, при която потребители на мобилни услуги биват подведени да изпращат множество SMS-и към определени номера. В публикацията предупреждението е формулирано като сигнал за…
11.02.2026

Yettel сменя главния изпълнителен директор и обявява следващата му роля в групата.

Yettel сменя главния изпълнителен директор и обявява следващата му роля в групата. Джейсън Кинг напуска позицията си като главен изпълнителен директор на Yettel. По официална информация той поема ръководството на инфраструктурното звено на e& PPF Telecom Group – CETIN…
10.02.2026

В Sofia Tech Park стартира инициативата Quantum Society Bulgaria

На 10 февруари 2026 г. в Sofia Tech Park е планирано първото събитие на Quantum Society Bulgaria. Инициативата цели да свърже изследователи и софтуерни инженери около квантовите технологии.
10.02.2026

В София се провежда Cyber Security среща с тема Zero Trust.

В София се провежда Cyber Security среща с тема Zero Trust. В анонса се посочва, че това е поредно издание на регулярна среща на общността по киберсигурност. Темата е формулирана около Zero Trust и как този подход се прилага на практика в реални организации.