Category: SecurityNews
-
CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware
Cybersecurity researchers have disclosed details of a new campaign dubbed CRESCENTHARVEST, likely targeting supporters of Iran’s ongoing protests to conduct information theft and long-term espionage.The Acronis Threat Research Unit (TRU) said it observed the activity after January 9, with the attacks designed to deliver a malicious payload that serves as a remote access trojan (RAT)…
-
Remote Access ohne IP – Zeroport will VPNs überflüssig machen
First seen on security-insider.de Jump to article: www.security-insider.de/zeroport-will-vpns-ueberfluessig-machen-a-ab9aced40c5022d33d26b3c65688fa12/
-
More Than 40% of South Africans Were Scammed in 2025
Tags: scamSurvey underscores the reality that scammers follow scalable opportunities and low friction, rather than rich targets that tend to be better protected. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-analytics/south-africans-scammed-2025
-
Hybride Angriffe zwischen Cloud und On-Premises – Warum fragmentierte Sicherheit gegen hybride Angriffe versagt
First seen on security-insider.de Jump to article: www.security-insider.de/hybride-angriffe-cloud-soc-konvergenz-a-f997e23c17b6b4e248b448bad3db46d4/
-
From in-house CISO to consultant. What you need to know before making the leap
Tags: advisory, best-practice, business, ciso, compliance, control, cybersecurity, framework, jobs, resilience, risk, service, skills, toolSkills that carry over into consulting: Many of the skills CISOs honed inside large organizations translate directly to the new consulting job, while others suddenly matter more than they ever did before. In addition to technical skills, it is often the practical ones that prove most valuable.The ability to prioritize, sharpened over years in a…
-
From in-house CISO to consultant. What you need to know before making the leap
Tags: advisory, best-practice, business, ciso, compliance, control, cybersecurity, framework, jobs, resilience, risk, service, skills, toolSkills that carry over into consulting: Many of the skills CISOs honed inside large organizations translate directly to the new consulting job, while others suddenly matter more than they ever did before. In addition to technical skills, it is often the practical ones that prove most valuable.The ability to prioritize, sharpened over years in a…
-
Poland bans camera-packing cars made in China from military bases
Dell, however, is welcome to help build a local-language LLM First seen on theregister.com Jump to article: www.theregister.com/2026/02/19/poland_china_car_ban/
-
Empowering a Global SaaS Workforce: From Identity Security to Financial Access
Explore how identity security and financial access solutions empower a global SaaS workforce with secure authentication and seamless payments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/empowering-a-global-saas-workforce-from-identity-security-to-financial-access/
-
90 Prozent der Ransomware-Angriffe umgehen Firewalls
Ransomware-Angreifer umgehen Firewalls zunehmend über bekannte Sicherheitslücken und verwundbare Konten, und das in einem Tempo, das Verteidigern kaum Zeit zur Reaktion lässt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/ransomware-2025
-
Advantest Cyberattack Triggers Ransomware Investigation Across Internal Network
Advantest Corporation has confirmed that it is responding to a cybersecurity incident First seen on thecyberexpress.com Jump to article: thecyberexpress.com/advantest-cyberattack-ransomware-investigation/
-
Mozilla Firefox Issues Emergency Patch for Heap Buffer Overflow in Firefox v147
Mozilla has released an out-of-band security update to address a critical vulnerability affecting its browser. The update, issued as Firefox v147.0.4, resolves a high-impact Heap buffer overflow flaw in the libvpx video codec library. The issue is tracked under CVE-2026-2447 and was identified by security researcher jayjayjazz. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/firefox-v147-cve-2026-2447/
-
Poland bans camera-packing cars made in China cars from military bases
Dell, however, is welcome to help build a local-language LLM First seen on theregister.com Jump to article: www.theregister.com/2026/02/19/poland_china_car_ban/
-
Poland bans camera-packing cars made in China cars from military bases
Dell, however, is welcome to help build a local-language LLM First seen on theregister.com Jump to article: www.theregister.com/2026/02/19/poland_china_car_ban/
-
Public mobile networks are being weaponized for combat drone operations
On June 1, 2025, Ukraine launched a coordinated drone strike on five airfields inside Russia, disabling or destroying aircrafts. The attack involved more than 100 drones … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/enea-mobile-connected-drones-report/
-
Public mobile networks are being weaponized for combat drone operations
On June 1, 2025, Ukraine launched a coordinated drone strike on five airfields inside Russia, disabling or destroying aircrafts. The attack involved more than 100 drones … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/enea-mobile-connected-drones-report/
-
OpenAI Launches EVMbench: A New Framework to Detect and Exploit Blockchain Vulnerabilities
Tags: ai, blockchain, crypto, cyber, exploit, framework, intelligence, open-source, openai, vulnerabilityOpenAI has collaborated with crypto investment firm Paradigm to release EVMbench, a new benchmark designed to evaluate how artificial intelligence agents interact with smart contract security. As smart contracts currently secure over $100 billion in open-source crypto assets, the ability of AI to successfully read, write, and audit code is becoming a critical component of…
-
OpenAI Launches EVMbench: A New Framework to Detect and Exploit Blockchain Vulnerabilities
Tags: ai, blockchain, crypto, cyber, exploit, framework, intelligence, open-source, openai, vulnerabilityOpenAI has collaborated with crypto investment firm Paradigm to release EVMbench, a new benchmark designed to evaluate how artificial intelligence agents interact with smart contract security. As smart contracts currently secure over $100 billion in open-source crypto assets, the ability of AI to successfully read, write, and audit code is becoming a critical component of…
-
Researchers Expose DigitStealer C2 Infrastructure Targeting macOS Users
DigitStealer’s expanding command-and-control (C2) footprint is exposing more of its backend than its operators likely intended, giving defenders fresh opportunities to track and block new infrastructure linked to the macOS”‘targeting infostealer. Unlike many popular stealers, it does not expose a web panel for affiliates, strongly suggesting a closed-operation rather than a broad malware”‘as”‘a”‘service (MaaS) offering.…
-
New Threat Emerges as Attackers Leverage Grok and Copilot to Evade Security Monitoring
Researchers at Check Point Research (CPR) have uncovered a novel technique where cybercriminals utilize popular AI platforms like Grok and Microsoft Copilot to orchestrate covert attacks. This method transforms benign AI web services into proxies for Command and Control (C2) communication. By leveraging the web browsing and URL-fetching capabilities of these assistants, attackers can tunnel…
-
Buffer Overflow und UseFree – Schwachstellen in FreeRDP bedrohen Windows und Unix
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecken-freerdp-windows-unix-a-772800b25cbbfbd1179fd5698fe27e18/
-
Empowering a Global SaaS Workforce: From Identity Security to Financial Access
Explore how identity security and financial access solutions empower a global SaaS workforce with secure authentication and seamless payments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/empowering-a-global-saas-workforce-from-identity-security-to-financial-access/
-
Empowering a Global SaaS Workforce: From Identity Security to Financial Access
Explore how identity security and financial access solutions empower a global SaaS workforce with secure authentication and seamless payments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/empowering-a-global-saas-workforce-from-identity-security-to-financial-access/
-
Consumers feel less judged by AI debt collectors
Tags: aiDebt collection agencies are starting to use automated voice systems and AI-driven messaging to handle consumer calls. These systems help scale outreach, reduce call center … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/consumer-ai-debt-collection/
-
Attackers keep finding the same gaps in security programs
Attackers keep getting in, often through the same predictable weak spots: identity systems, third-party access, and poorly secured perimeter devices. A new threat report from … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/managed-xdr-threat-report-security-programs/
-
Critical MCP Server Enables Arbitrary Code Execution and Sensitive Data Exfiltration
MCP servers can silently turn AI assistants into powerful attack platforms, enabling arbitrary code execution, large”‘scale data exfiltration, and stealthy user manipulation across both local machines and cloud environments. New research and recent real”‘world incidents show that this emerging ecosystem is already being abused in the wild, including a malicious Postmark MCP server that quietly…
-
Burnout im digitalen Schutzraum: Die stille Krise der Cyberbranche
Tags: unclassifiedBurnout kommt nicht nur dort, wo es offensichtlich ist. Selbst wenn die Arbeit erfüllend ist, können Überlastung und ständiger Druck die Motivation zersetzen. Engagement verwandelt sich in Erschöpfung, Begeisterung in Zynismus. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/burnout-im-digitalen-schutzraum-die-stille-krise-der-cyberbranche/a43757/
-
Burnout im digitalen Schutzraum: Die stille Krise der Cyberbranche
Tags: unclassifiedBurnout kommt nicht nur dort, wo es offensichtlich ist. Selbst wenn die Arbeit erfüllend ist, können Überlastung und ständiger Druck die Motivation zersetzen. Engagement verwandelt sich in Erschöpfung, Begeisterung in Zynismus. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/burnout-im-digitalen-schutzraum-die-stille-krise-der-cyberbranche/a43757/