Halluzinierte Paketnamen sind oft glaubhaft und wiederholen sich – ideal für Angreifer. mongmong_Studio- shutterstock.com Cybersicherheitsforscher der University of Texas in San Antonio, der Virginia Tech und der University of Oklahama…
Despite successful operations against ransomware gangs in 2024, ransomware was still the most pervasive threat to critical infrastructure in the US last year, according to the FBI’s latest Internet Crime…
Unless countries align their cybersecurity strategies, fragmentation will compromise cyber defenses and response, a group of more than 40 chief information security officers (CISOs) from global enterprises warned world leaders…
Despite an explosion in cybersecurity tools and awareness campaigns, organizations around the world are still surrendering to ransomware attackers at an alarming rate. According to new research from Rubrik Zero…
A flaw in SSL.com’s domain control validation (DCV) process allowed attackers to bypass verification and issue fraudulent SSL certificates for any domain linked to certain email providers. According to an…
Cloud security continues to be a vexing situation, and the tool set continues to become more complex, riddled with acronyms representing possible solutions. Now there’s another: the cloud-native application protection…
Earlier this month my researcher Barbara Schluetter and I had the pleasure of attending the Kyiv International Cyber Resilience Forum 2025, in Kyiv, Ukraine. Over the course of two days…
Chinese cyberespionage group Billbug has revamped its attack toolkit with new malware payloads in a wide-reaching campaign targeting multiple organizations in Southeast Asia. The new tools, which include credential stealers,…
Von Wein zu Trauben: Neue Wineloader-Variante Grapeloader entdeckt. Red Kalf Creatives – shutterstock Die russische Hackergruppe APT29, die auch als Cozy Bear bekannt ist und dem Auslandsgeheimdienst SVR zugeordnet wird,…
The infamous BlueKeep flaw from 2019, tracked as CVE-2019-0708, has come back to haunt security professionals as reports of fresh, in-the-wild abuse surface. The dangerous, “wormable” RCE flaw affecting Microsoft’s…
Zero trust has become a bellwether for access management across the security industry. But while security chiefs have by and large embraced the approach — founded on the philosophy that…
Technical, organizational, and cultural factors are preventing enterprises from resolving vulnerabilities uncovered in penetration tests — a problem the advent of generative AI is exacerbating rather than relieving. According to…
loading=”lazy” width=”400px”>Übernahmeaktivitäten bergen auch mit Blick auf die Security Risiken. NESPIX – shutterstock.com Im Rahmen ihrer Arbeit an dem kürzlich veröffentlichten Report „2025 Data Security Incidcent Response“ (PDF) haben Security-Experten…
Ein guter CISO führt strategisch durch die Krise, nicht nur technisch. Ein klarer Notfallplan ist hier von großem Vorteil. VZ_Art – shutterstock Das Cyberangriffe immer mehr werden, konstant größeren Schaden…
Experts are urging enterprises to immediately patch an Erlang/OTP Secure Shell (SSH) vulnerability that allows unauthenticated attackers to gain full access to a device. The remote code execution (RCE) vulnerability…