Despite an explosion in cybersecurity tools and awareness campaigns, organizations around the world are still surrendering to ransomware attackers at an alarming rate. According to new research from Rubrik Zero…
A flaw in SSL.com’s domain control validation (DCV) process allowed attackers to bypass verification and issue fraudulent SSL certificates for any domain linked to certain email providers. According to an…
Cloud security continues to be a vexing situation, and the tool set continues to become more complex, riddled with acronyms representing possible solutions. Now there’s another: the cloud-native application protection…
Earlier this month my researcher Barbara Schluetter and I had the pleasure of attending the Kyiv International Cyber Resilience Forum 2025, in Kyiv, Ukraine. Over the course of two days…
Chinese cyberespionage group Billbug has revamped its attack toolkit with new malware payloads in a wide-reaching campaign targeting multiple organizations in Southeast Asia. The new tools, which include credential stealers,…
Von Wein zu Trauben: Neue Wineloader-Variante Grapeloader entdeckt. Red Kalf Creatives – shutterstock Die russische Hackergruppe APT29, die auch als Cozy Bear bekannt ist und dem Auslandsgeheimdienst SVR zugeordnet wird,…
The infamous BlueKeep flaw from 2019, tracked as CVE-2019-0708, has come back to haunt security professionals as reports of fresh, in-the-wild abuse surface. The dangerous, “wormable” RCE flaw affecting Microsoft’s…
Zero trust has become a bellwether for access management across the security industry. But while security chiefs have by and large embraced the approach — founded on the philosophy that…
Technical, organizational, and cultural factors are preventing enterprises from resolving vulnerabilities uncovered in penetration tests — a problem the advent of generative AI is exacerbating rather than relieving. According to…
loading=”lazy” width=”400px”>Übernahmeaktivitäten bergen auch mit Blick auf die Security Risiken. NESPIX – shutterstock.com Im Rahmen ihrer Arbeit an dem kürzlich veröffentlichten Report „2025 Data Security Incidcent Response“ (PDF) haben Security-Experten…
Ein guter CISO führt strategisch durch die Krise, nicht nur technisch. Ein klarer Notfallplan ist hier von großem Vorteil. VZ_Art – shutterstock Das Cyberangriffe immer mehr werden, konstant größeren Schaden…
Experts are urging enterprises to immediately patch an Erlang/OTP Secure Shell (SSH) vulnerability that allows unauthenticated attackers to gain full access to a device. The remote code execution (RCE) vulnerability…
Cybercriminals are adopting increasingly stealthy tactics for breaking into networks, while attacks targeting specific AI technologies are an emerging threat. Those are just a couple of the core findings in…
As cloud-native architectures continue to evolve, so have the complexities of securing them. Traditional security approaches, often built around static infrastructure and perimeter defenses, struggle to keep pace with the…
Microsoft says five of the 28 objectives it set for overhauling the way it designs, builds, tests, and operates products and services to improve security are nearing completion, although there…