With the US government now tying security clearances to the support of specific political positions, many in the security community fear it may tar US vendors with the same brush…
Experten warnten, dass ohne CVE ein Koordinationschaos in der IT-Sicherheit droht. Die CISA scheint sie erhört zu haben. Jerome460 / Shutterstock Am 16. April 2025 hatte die Trump-Regierung kurzfristig ein…
Apple is urging immediate patching of two zero-day vulnerabilities in its CoreAudio and RPAC components, citing their use in what the iPhone maker describes as “extremely sophisticated attacks.” Tracked as…
Der neue Remote Access Trojaner ResolverRAT nutzt DLL-Side-Loading-Probleme aus. janews – shutterstock.com Forscher von Morphisec haben einen neuen Remote Access Trojaner (RAT) mit dem Namen ResolverRAT entdeckt, der über Phishing-E-Mails…
Generative AI’s many benefits come with the drawback of data security risks, primarily through shadow AI use and the leakage of sensitive information. These risks are being compounded in the…
CISOs running Gladinet’s CentreStack file server or Triofox file sharing server should update the applications as soon as possible because of a hard-coded key vulnerability which is being exploited now,…
Cyberespionage group known as APT29 and linked to Russia’s foreign intelligence service (SVR), has added a new malware loader to its toolset. Used for fingerprinting, persistence and payload delivery, the…
Infosec pros are relieved that the Trump administration at the last minute extended support for MITRE’s Common Vulnerabilities and Exposures (CVE) database, but at least one wonders if funding will…
Someone using a Russian IP address attempted to access the internal systems of the US National Labor Relations Board (NLRB) using legitimate accounts set up by staff from Elon Musk’s…
Important update April 16, 2025: Since this story was first published, CISA signed a contract extension that averts a shutdown of the MITRE CVE program. A CISA spokesperson sent CSO…
Cato Networks recently unveiled new generative AI capabilities in its Cloud Access Security Broker (CASB) that the secure access service edge (SASE) provider says will let enterprise IT organizations detect,…
Es gibt Hinweise auf ein neues Datenleck bei Melting Mind. SuPatMaN – shutterstock.com Noch am Dienstag (15. April) berichtete der Norddeutsche Rundfunk NDR, dass Melting Mind bei dem Cyberangriff im…
width=”2432″ height=”1368″ sizes=”(max-width: 2432px) 100vw, 2432px”>Oft reichen wenige echte Datenfragmente – etwa Name und Geburtsdatum – um eine synthetische Identität zu erschaffen. Studio-M – shutterstock.com Die weltweite Welle der Online-Kriminalität…
Fingierte Messenger-Apps täuschen ihre Opfer und führen so freiwillig zur Installation der Schadsoftware. siro46 – shutterstock.com as Bundesamt für Verfassungsschutz und das britische National Cyber Security Centre warnen vor der…
For decades security chiefs have trained their sights on job applicants with university degrees. But ongoing skills shortages and experiences with highly talented security pros who do not hold college…