A critical zero-day vulnerability in Windows servers running the Kerberos authentication system, first disclosed in May, has now been patched by Microsoft, but must be given high priority by admins…
Just hours after OpenAI dropped GPT-5, the newest brain behind ChatGPT, researchers busted it with a multi-turn jailbreak built on “Echo-Chamber” and Storytelling tricks. The attack, detailed by researchers at…
BSI-Präsidentin Plattner: “Wir haben technologische Abhängigkeiten an ganz vielen Stellen.” Jan Waßmuth Seine Abhängigkeit von Cloud-Lösungen, KI-Modellen und anderen Tech-Produkten aus dem Ausland wird Deutschland nach Einschätzung des Bundesamtes für…
The dark web refers to web pages that are not indexed by commonly used search engines. Under the cloak of anonymity, cybercriminals and threat actors can operate, selling an array…
Transformational developments in cybersecurity and agentic AI were front and center during presentations and product announcements at Black Hat and DEF CON in Las Vegas last week. Here are the…
KI-Agenten sind nützlich – und gefährlich, wie aktuelle Untersuchungserkenntnisse von Sicherheitsexperten demonstrieren. amgun | shutterstock.com Large Language Models (LLMs) werden mit immer mehr Tools und Datenquellen verbunden. Das bringt Vorteile,…
Kriminelle könnten Gemini mit Prompt-Injection in Kalendereinladungen angreifen. gguy – shutterstock.com Google hat den KI-gestützten Assistenten Gemini in Android, Google-Webdienste und Googles Workspace-Apps integriert. Neben seiner Funktion als Chatbot hat…
At DEF CON 33, security researchers demonstrated a novel distributed denial-of-service technique using weaponized Windows domain controllers (DCs), along with a set of zero-click vulnerabilities affecting Windows services. Dubbed “Win-DDoS,”…
New Heimdal study reveals how tool sprawl creates blind spots, with over half of providers experiencing daily or weekly burnout Survey of 80 North American MSPs shows fragmented security stacks…
To understand how critical cybersecurity has become, one need look no further than the developing trends in CSO recruiting: Security leadership roles are cited among the most difficult to fill…
Sie fühlen sich leer ohne Security-Dashboard? Diese Dokumentationen überbrücken den Schmerz bis zum nächsten Arbeitstag. Foto: Gorodenkoff – shutterstock.com Wenn Sie in Ihrer Profession als Sicherheitsentscheider voll aufgehen, brauchen Sie…
The number of tools that large language models (LLMs) get connected to is rapidly increasing, and along with that comes growth in the attack surface, and in the opportunities for…
At Black Hat USA 2025, Sweet Security’s Naor Haziz revealed a significant privilege escalation flaw in Amazon ECS that allows a low-privilege container running on an EC2-backed task to hijack…
When I first heard someone suggest blockchain for enterprise cybersecurity, I nearly rolled my eyes. At the time, I was knee-deep in helping a Fortune 100 company drive a cloud…
Das Mandalay Bay Convention Center wird zur Black Hat USA zum Cybersecurity-Hub – 2025 lag der Fokus dabei insbesondere auf Agentic und Generative AI. Andrey Bayda | shutterstock.com Zur Black-Hat-Konferenz…