Category: SecurityNews
-
Insider Threat: Hackers Paying Company Insiders to Bypass Security
A new report from Check Point Research reveals a growing trend of cyber criminals recruiting employees at banks, telecoms, and tech giants. Learn how hackers use the darknet and Telegram to offer payouts up to $15,000 for internal access to companies like Apple, Coinbase, and the Federal Reserve. First seen on hackread.com Jump to article:…
-
WatchGuard Firebox firewalls under attack (CVE-2025-14733)
More than 115,000 internet-facing WatchGuard Firebox firewalls may be vulnerable to compromise via CVE-2025-14733, a remote code execution vulnerability actively targeted by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/12/22/watchguard-firebox-vulnerability-cve-2025-14733/
-
NHS Supplier Confirms Cyber-Attack, Operations Unaffected
DXS International, an official partner of NHS England, said the breach has not affected its operations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-nhs-supplier-confirms/
-
10 Best Multi-Factor Authentication Solutions in 2026
Explore the 10 best MFA solutions in 2026. Compare features, pricing, pros, cons, and find the right multi-factor authentication tool for your business. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/10-best-multi-factor-authentication-solutions-in-2026/
-
15 Best Passwordless Authentication Solutions in 2026
Tags: authenticationCompare the 15 best passwordless authentication solutions for 2026. Explore features, pricing, use cases, and how to choose the right tool. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/15-best-passwordless-authentication-solutions-in-2026/
-
9 MFA Mistakes in Manufacturing IT and Fixes
Discover the most common MFA mistakes in manufacturing IT and learn practical fixes to improve security, uptime, and authentication on factory floors. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/9-mfa-mistakes-in-manufacturing-it-and-fixes/
-
DIG AI: Uncensored darknet AI assistant at the service of criminals and terrorists
Resecurity has identified the emergence of uncensored darknet AI assistants, enabling threat actors to leverage advanced data processing capabilities for malicious purposes. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/12/22/resecurity-dig-ai-assistant-research/
-
Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374
An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a historic supply-chain attack in an End-of-Life (EoL) software product, not a new attack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/not-all-cisa-linked-alerts-are-urgent-asus-live-update-cve-2025-59374/
-
Nefilim Ransomware Affiliate Pleads Guilty
A Ukrainian man has pleaded guilty to charges connecting him to Nefilim ransomware attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nefilim-ransomware-affiliate/
-
Der Cloud zu vertrauen, reicht nicht aus – Sieben Gründe, warum Unternehmen Microsoft-365-Backups brauchen
First seen on security-insider.de Jump to article: www.security-insider.de/sieben-gruende-warum-unternehmen-microsoft-365-backups-brauchen-a-6f44269b3effe6d09a2d568e060c47d2/
-
Bundesregierung: Nutzung von Datenbrokern ist Staatsgeheimnis
Tags: governanceDie Bundesregierung will keine Angaben dazu machen, bei welchen Firmen deutsche Sicherheitsbehörden Nutzerdaten einkaufen. First seen on golem.de Jump to article: www.golem.de/news/bundesregierung-nutzung-von-datenbrokern-ist-staatsgeheimnis-2512-203514.html
-
Why Networking Is Your Secret Weapon in Cybersecurity Job Hunting
In this episode, Tom Eston discusses the unique challenges in the current cybersecurity job market, emphasizing the importance of networking. Tom provides practical tips on how to enhance networking skills, such as attending conferences, volunteering for open source projects, creating a blog, and seeking mentors. He also addresses misconceptions about the job shortage in cybersecurity……
-
University of Sydney discloses a data breach impacting 27,000 people
Hackers stole personal data of about 27,500 people from the University of Sydney after accessing an online code library, the university confirmed. The University of Sydney disclosed a data breach in which threat actors accessed an online code library and stole personal information linked to about 27,500 individuals, including current and former staff, affiliates, students,…
-
Docker makes hardened images free open and transparent for everyone
Docker has made its open source Docker Hardened Images project available at no cost for every developer and organization. The catalog contains more than 1,000 container images … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/12/22/free-open-docker-hardened-images/
-
574 arrests, $3 million recovered in Africa-wide cybercrime crackdown
Law enforcement agencies across 19 countries arrested 574 suspects and recovered approximately $3 million during a major cybercrime operation spanning Africa. Suspects were … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/12/22/europol-africa-cybercrime-arrests-2025/
-
Ukrainian hacker admits affiliate role in Nefilim ransomware gang
A Ukrainian national pleaded guilty on Friday to conducting Nefilim ransomware attacks that targeted high-revenue businesses across the United States and other countries. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ukrainian-hacker-admits-affiliate-role-in-nefilim-ransomware-gang/
-
Scripted Sparrow Sends Millions of BEC Emails Each Month
Fortra has uncovered a prolific BEC group dubbed “Scripted Sparrow” spanning three continents and at least five countries First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/scripted-sparrow-millions-bec-each/
-
EU-weite Standards für NIS 2 fehlen noch – Vom Versprechen zur Realität: Was NIS 2 kann und woran es noch fehlt
Tags: nis-2First seen on security-insider.de Jump to article: www.security-insider.de/nis2-eu-standards-meldeprozesse-lieferkette-a-f6ea51861527cb7f1785eca4b50787a3/
-
Geld futsch: Kryptotransfer von 50 Millionen US-Dollar geht schief
Tags: cryptoEin Krypto-Nutzer wollte 50 Millionen USDT transferieren. Trotz Testtransaktion ist fast alles in der falschen Wallet gelandet – und vermutlich für immer weg. First seen on golem.de Jump to article: www.golem.de/news/geld-futsch-krypto-transfer-von-50-millionen-us-dollar-geht-schief-2512-203511.html
-
Polygraph Controversy at CISA Sparks Internal Investigation, Six Staff Placed on Leave
A failed polygraph test taken by the acting head of the Cybersecurity and Infrastructure Security Agency (CISA) has triggered an internal investigation at the Department of Homeland Security, placing at least six long-serving career officials on administrative leave and deepening turmoil inside the federal government’s lead civilian cyber defense agency. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-acting-director-polygraph-test/
-
Critical RCE flaw impacts over 115,000 WatchGuard firewalls
Over 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-115-000-watchguard-firewalls-vulnerable-to-ongoing-rce-attacks/
-
Critical RCE flaw impacts over 115,000 WatchGuard firewalls
Over 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-115-000-watchguard-firewalls-vulnerable-to-ongoing-rce-attacks/
-
Docker Hardened Images now open source and available for free
More than a 1,000 Docker Hardened Images (DHI) are now freely available and open source for software builders, under the Apache 2.0 license. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/docker-hardened-images-now-open-source-and-available-for-free/
-
Termine – Das war der Microsoft Patchday 2025
Tags: microsoftFirst seen on security-insider.de Jump to article: www.security-insider.de/microsoft-patchday-2025-patch-tuesday-a-12587d100d02b61d2169217bdfbcc38b/
-
Leicht hackbar: Deutschlandticket-Betrug erreicht dreistellige Millionenhöhe
IT-Sicherheitsforscher haben massive Schwachstellen beim Deutschlandticket aufgedeckt. Der Schaden durch Betrug liegt im dreistelligen Millionenbereich. First seen on golem.de Jump to article: www.golem.de/news/leicht-hackbar-deutschlandticket-betrug-erreicht-dreistellige-millionenhoehe-2512-203506.html
-
Kritische Sicherheitslücke: Laufende Attacken gefährden über 100.000 Firewalls
Allein in Deutschland gibt es rund 13.000 anfällige Watchguard-Firewalls. Angreifer schleusen bereits Schadcode ein. Admins sollten zügig handeln. First seen on golem.de Jump to article: www.golem.de/news/kritische-firebox-luecke-laufende-attacken-gefaehrden-ueber-100-000-firewalls-2512-203504.html
-
Rubrik skizziert Cyberresilienz Ausblick 2026
Im Jahr 2026 wird der Mythos zusammenbrechen, dass native Cloud-Tools ausreichend sind. Denn Unternehmen erkennen, dass ihre isolierten Multi-Cloud-Umgebungen die Cyber-Wiederherstellung erheblich verlangsamen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/rubrik-skizziert-cyberresilienz-ausblick-2026/a43257/
-
Rubrik skizziert Cyberresilienz Ausblick 2026
Im Jahr 2026 wird der Mythos zusammenbrechen, dass native Cloud-Tools ausreichend sind. Denn Unternehmen erkennen, dass ihre isolierten Multi-Cloud-Umgebungen die Cyber-Wiederherstellung erheblich verlangsamen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/rubrik-skizziert-cyberresilienz-ausblick-2026/a43257/