Defence24.pl…
- Przez wiele lat rozwój przemysłu obronnego opierał się na prostym założeniu, że przewagę zdobywa ten, kto potrafi zbudować bardziej zaawansowaną platformę. Dotyczyło to samolotów, czołgów, okrętów, a dziś również bezzałogowych systemów latających – od tanich dronów FPV, przez wielowirnikowce i amunicję krążącą, po większe bezzałogowce rozpoznawcze i uderzeniowe. W praktyce jednak doświadczenia ostatnich lat pokazują, […]
- W Republice Federalnej Niemiec pojawił się raport o bardzo krytycznym wydźwięku w stosunku do dwóch programów prowadzonych przez największy niemiecki koncern zbrojeniowy Rheinmetall.
- Robot nie ma zastąpić żołnierza – ma sprawić, by ten wracał z misji żywy. Doświadczenia z wojny w Ukrainie pokazują, że prawdziwym przełomem na froncie nie są fantastycznonaukowe roboty bojowe, lecz proste, odporne drony lądowe transportujące amunicję i ewakuujące rannych.
- W czwartek 13 sierpnia 2026 roku na wodach Zatoki Gdańskiej odbyło się wodowanie fregaty Wicher. Prezentujemy wyjątkowe nagranie, pokazujące od kulis ten fascynujący, choć długi i skomplikowany, proces.
- W Jemenie narasta napięcie związane z kolejnymi atakami rakietowymi oraz dronowymi. Pojawia się więc pytanie, czy rzeczywiście po raz kolejny Huti zdecydują się na pełnoskalową kampanię wymierzoną we wrogów wewnętrznych, a może na uderzenia skierowane przeciwko Saudyjczykom.
- Osiemnaście modułów bateryjnych systemu SAN za około 15 mld zł netto, nowa infrastruktura telekomunikacyjna oraz wykorzystanie lasów, mokradeł i cieków wodnych do blokowania ruchu przeciwnika – tak, według MON, ma wyglądać technologiczna i środowiskowa część Tarczy Wschód. Pierwsze trzy plutony ogniowe SAN mają trafić do wojska jeszcze w 2026 roku.
- Blisko 300 tys. betonowych jeży ma zostać przetransportowanych do połowy października 2026 roku na północ i wschód Polski. MON podaje, że działaniami objęto już 100 km newralgicznych odcinków granicy, a do końca roku zabezpieczenie ma obejmować ponad 200 km. Tarcza Wschód wchodzi – według resortu – w etap masowego skalowania.
- Tarcza Wschód to program mający na celu ufortyfikowanie wschodniej granicy Rzeczpospolitej Polskiej, ale ma on być czymś więcej niż tylko linią fortyfikacji.
- Według źródeł ukraińskiego wywiadu wojskowego, Rosja zaczęła dostawać z Korei Północnej nowe, znacznie bardziej niszczycielskie pociski balistyczne.
- Pod koniec lipca na Morzu Bałtyckim doszło do niecodziennego zdarzenia. Rosyjski i duński dron wzajemnie obserwowały się, a nagrania trafiły do sieci.
- Firma VIGO Photonics w czasie targów MSPO 2026 po raz kolejny udowadnia, że polskie firmy są nie tylko producentami gotowych systemów optoelektronicznych, ale również najwyższej klasy komponentów detekcyjnych, bez których te systemy nie mogłyby powstać.
- Wczoraj wieczorem nad Polską przeleciał ukraiński myśliwiec – prawdopodobnie F-16. Samolot skierował się do Danii.
- Codzienny przegląd mediów sektora bezpieczeństwa i obronności.
- Szef Sztabu Generalnego Wojska Polskiego gen. Wiesław Kukuła złożył wizytę w Finlandii, gdzie spotkał się z szefem obrony Finlandii gen. Janne Jaakkolą. Tematem rozmów były m.in. szkolenia rezerw osobowych.
- Już za trzy tygodnie – we wtorek, 8 września, o godz. 12.00 – rozpocznie się XXXV Forum Ekonomiczne w Karpaczu. Zainteresowanie tegoroczną edycją jest wyjątkowo duże, dlatego warto jak najszybciej się zarejestrować. Dynamika zgłoszeń wskazuje, że tegoroczna frekwencja może być wyższa niż w latach ubiegłych. Szacujemy, że Karpacz odwiedzi ponad 6000 gości – liderów świata […]
- Siły Zbrojne Szwecji konsekwentnie budują zdolności do prowadzenia działań bojowych w wielu domenach. Rząd w Sztokholmie właśnie złożył zamówienie na bezzałogowce rozpoznawcze i uderzeniowe w Danii.
- Biały Dom właśnie opublikował dokument National Security Science & Technology Strategy – czyli Strategię Bezpieczeństwa Narodowego w zakresie Nauki i Technologii. Co znajdziemy w jego treści?
- Firma Trawena z Lublina będzie realizowała 7 letni kontrakt wart kilkadziesiąt milionów euro na rzecz niemieckich sił zbrojnych.
- Po rozpoczęciu przez Rosję pełnoskalowej agresji na Ukrainę 24 lutego 2022 r. w kolejnych państwach europejskich zaczęły pojawiać się śledztwa dotyczące podpaleń, przygotowywania eksplozji, rozpoznania infrastruktury wojskowej oraz werbowania wykonawców do działań sabotażowych.
- Rosja intensywnie rozpoznaje sposób działania systemów bezpieczeństwa państw NATO w regionie Morza Bałtyckiego. Zdaniem płk. Macieja Korowaja nie jest to już wyłącznie demonstracja siły ani „granie na nerwach”, lecz aktualizowanie planów potencjalnych operacji prowokacyjnych. Za szczególnie niebezpieczny uważa okres rozpoczynający się we wrześniu.
TVN wiadomości…
Błąd RSS: Retrieved unsupported status code "403"
Wyborcza Kraj…
Wystąpił błąd, co prawdopodobnie oznacza, że kanał nie działa. Spróbuj ponownie później.
Wyborcza Świat…
Wystąpił błąd, co prawdopodobnie oznacza, że kanał nie działa. Spróbuj ponownie później.
The Hacker News…
- Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation. While attackers employ AI to automate
- Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration. A brief description of each of the flaws is below –
- A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without […]
- Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required. The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It […]
- The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation. The affected releases are arrayref 0.3.10, internment 0.8.7, and append-only-vec 0.1.9, all published from the same owner
- Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. These clusters include UNC6293, UNC7005, and UNC5976. "These clusters engage in persistent, adaptive
- A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and AI-assisted exploit research keep lowering the […]
- The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using AI-generated scripts disguised as legitimate monitoring tools. That
- Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page. The AI security company, which has codenamed the technique […]
- Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before […]
- Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler Gateway, including certain FIPS and NDcPP builds, as well as SecurAccess
- A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that can lead to remote code execution. "A remote code execution vulnerability […]
- Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of the card's cryptography. The attack, which the researchers named "Zombie Card," requires physical
- In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. The incident began when a Meta employee posted a technical question on an internal forum. An engineer used an approved AI agent to analyze it, […]
- Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin server. The attacks, collectively named "CDN Tsunami," were evaluated against Alibaba, Baidu,
- A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and European financial institutions, global fintech and cryptocurrency services, and military-focused communications. "Manic sits at the intersection of Android banking malware and mobile spyware, combining financial-fraud
- Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus. The chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI
- Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android malware also features a PIN harvesting workflow targeting more than 140 banking and cryptocurrency applications.
- A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products. According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons that share source code and infrastructure overlaps. The campaign, […]
- Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous […]
SANS Internet Storm Center…
- In every MFA rollout, there will come a time where you think you are closing in on "done", and some automation to list what's left would be handy. Something quicker than scrolling through the web interface through thousands of accounts … This is that method. Also, remember when we discussed yesterday about the beta graph […]
- (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
- One thing that folks never seem to do after "going to the CLOOOOUUUUD" is to look at their logs, logs that they would have checked daily when things were on premise. One log that really bears looking at is the log of successful and failed logins. the call for that is:
- Building on the last diary on Using MS Graph and Powershell, let's look at "Risky" logins.
- Microsoft Graph is a newer API that is meant to replace several others.  OK, it's at version 2.3.9, so it's not all that new, but it's new enough that lots of folks (and commercial tools) aren't using it yet.   It allows you to Get and Set info from/to M365, Entra Users and Entra managed machines […]
- (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
- Cloud providers typically expose a REST API at 169.254.169.254 that allows code running on virtual machines to retrieve machine-specific data. Some of the data is more or less harmless, such as the region the machine is running in or its MAC and IP addresses. However, the service may also be used to retrieve credentials for […]
- (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
- (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
- Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing vulnerability. This vulnerability did not affect iOS/iPadOS.
Cybersecurity Avast…
- A call saying someone you love has been arrested and needs money ASAP can feel so real that you act before you think. Learn how bail bond scams work and what to watch for to help protect you and your family from falling for the scheme.
- Latest news We launched a new Avast One experience in 2026. Discover what’s new, see how it compares to the previous version, and learn how it makes your digital life simpler and more secure. In the ever-evolving landscape of the digital world, safeguarding your online presence has become more a necessity than a choice. […]
- If you've ever mentioned something in passing and then seen an ad for it shortly after, you're not imagining things. Learn how ads can sometimes follow you from real life to your screen, and how secure browsers with built-in ad blockers can help you take back control of what you see online.
- Spring break scams are out to ruin your vacation, but they don't have to. With a little awareness and Avast Free Antivirus protecting your devices, you can hit the beach without handing criminals an opening.
- You just sold a stack of old books for $100 on Facebook Marketplace. The buyer seemed eager, messaged instantly, and offered to pay extra. Sounds too good to be true? It probably is. Learn how to spot fake buyers before you lose both your money and your stuff.
- Scammers are using deepfake technology to replicate your child's voice in a kidnapping hoax, catfish with AI-generated video dates, and impersonate executives to steal millions. Learn how to spot deepfake fraud, and use Avast Deepfake Guard to help verify what's real before it's too late.
- Adoption fraud can blindside even the most prepared families, especially when emotions run high. Understanding common adoption scams and how to stay safe can help you move forward with more peace of mind.
- Facebook may feel like a safe place to connect, but scammers are increasingly using its ads, posts, and messages to deceive users. Here’s how cybercriminals are turning your feed into a gateway for fraud and what you can do to stay protected.
- If someone is blackmailing you with private photos or threats, do not pay. We know it's scary, but you don't need to comply. Learn how to handle sextortion threats, and discover how Avast can help secure your privacy.
- How a simple “I found your photo” message can quietly take over your account
Cybersecurity Kaspersky…
Błąd RSS: WP HTTP Error: cURL error 52: Empty reply from server
We Live Security…
- Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.
- And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?
- The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less
- AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong
- AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.
- OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup
- The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine
- ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities
- A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.
- AI is changing cybercrime, but SMB cyber readiness still largely depends on closing the familiar gaps
- Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026
- Your inbox is an identity system all of its own: whoever owns it may own a lot more
- Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience.
- ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data
- ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights
- ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen
- Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks.
- ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness
- A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages
- A shift in operational pattern of the infamous Vietnam-aligned APT group