Collecting Cyber-News from over 60 sources

Tag: cyberattack

BSI moniert Software-Sicherheit im Gesundheitswesen

Mar 18, 2026 1:09 PM

Tags: bsi, computer, cyberattack, Internet, software, vulnerability

Schwachstellen bei Praxisverwaltungssystemen hätten zu Cyberangriffen führen können.Das Bundesamt für Sicherheit in der Informationstechnik (BSI) mahnt einen besseren Schutz sensibler Gesundheitsdaten in Computer-Anwendungen von Arztpraxen, Kliniken und in der Pflege an. Die IT-Sicherheit von Softwareprodukten im Gesundheitswesen sei “ausbaufähig”, teilte das Amt nach Tests von Standardkonfigurationen verschiedener Anwendungen mit.In einem Projekt untersucht wurden demnach unter anderem vier exemplarische Praxisverwaltungssysteme.…
Deepfakes und KI-Malware verändern Bedrohungslage – Sieben Strategien gegen KI-gesteuerte Cyberangriffe

Mar 18, 2026 12:09 PM

Tags: ai, cyberattack, deep-fake, malware

First seen on security-insider.de Jump to article: www.security-insider.de/ki-gesteuerte-cyberangriffe-deepfakes-strategien-abwehr-a-27f61a93f3d15d088f8737b65fff2151/
ClickFix treibt neue Infostealer-Kampagnen an

Mar 18, 2026 11:11 AM

Tags: api, captcha, control, cyberattack, encryption, exploit, framework, github, infrastructure, intelligence, lazarus, login, malware, microsoft, powershell, rat, social-engineering, threat, windows, wordpress

ClickFix-Kampagnen werden immer raffinierter und zielen verstärkt auf WordPress-Webseiten.Cyberkriminelle kombinieren kompromittierte Websites mit immer raffinierteren Social-Engineering-Köder-Methoden, um neue Infostealer-Malware zu verbreiten. Bekannt ist das Ganze unter dem Namen ClickFix und zudem effektiv: In einer einzigen Kampagne wurden über 250 WordPress-Websites in zwölf Ländern infiziert.Während diese Kampagne zu unauffälligen, im Arbeitsspeicher ausgeführten Schadprogrammen führt, beobachtete Microsoft…
Microsoft Teams-Based Vishing Attack Tricks Victims Into Quick Assist Takeover

Mar 18, 2026 10:09 AM

Tags: attack, breach, corporate, cyber, cyberattack, detection, identity, microsoft, phishing, social-engineering, software, threat, vulnerability

Threat actors are increasingly relying on social engineering rather than complex software vulnerabilities to breach corporate networks. In November 2025, Microsoft’s Detection and Response Team (DART) investigated a notable identity-first intrusion where attackers successfully used Microsoft Teams voice phishing (vishing) to compromise a corporate device via Quick Assist. This incident, detailed in Microsoft’s latest Cyberattack…
HP Wolf Security Threat Report – Schnell statt ausgefeilt: KI macht Cyberangriffe zur Massenware

Mar 18, 2026 10:09 AM

Tags: ai, cyberattack, threat

First seen on security-insider.de Jump to article: www.security-insider.de/ki-modulare-malware-kampagnen-hp-wolf-security-report-a-fa4df86b6da927124af7f66967828548/
Iran’s cyberattack against med tech firm is ‘just the beginning’

Mar 18, 2026 9:10 AM

Tags: cyberattack, iran

Even without a navy, or air power, ‘They’ll still have the ability to hack’ First seen on theregister.com Jump to article: www.theregister.com/2026/03/18/irans_cyberattack_against_stryker/
Cybercriminals scale up, government sector hit hardest

Mar 18, 2026 9:10 AM

Tags: cyberattack, cybercrime, government, threat

Government agencies faced the highest volume of cyberattack campaigns in 2025, according to new findings from HPE Threat Labs, which tracked 1,186 active campaigns over the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/18/government-agencies-cyberattack-campaigns-volume/
APT-Gruppe Camaro Dragon schlägt in Katar zu

Mar 18, 2026 8:09 AM

Tags: apt, cyberattack

Aktuelle Erkenntnisse von Check Point Research zeigen, wie eng Cyberangriffe inzwischen mit geopolitischen Entwicklungen verknüpft sind. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/apt-camaro-dragon-in-katar
APT-Gruppe Camaro Dragon schlägt in Katar zu

Mar 18, 2026 8:09 AM

Tags: apt, cyberattack

Aktuelle Erkenntnisse von Check Point Research zeigen, wie eng Cyberangriffe inzwischen mit geopolitischen Entwicklungen verknüpft sind. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/apt-camaro-dragon-in-katar
APT-Gruppe Camaro Dragon schlägt in Katar zu

Mar 18, 2026 8:09 AM

Tags: apt, cyberattack

Aktuelle Erkenntnisse von Check Point Research zeigen, wie eng Cyberangriffe inzwischen mit geopolitischen Entwicklungen verknüpft sind. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/apt-camaro-dragon-in-katar
Cyberattacks Spike 245% in the Two Weeks After the Start of War with Iran

Mar 18, 2026 6:10 AM

Tags: cyberattack, group, iran

Akamai researchers saw a 245% spike in cyberattacks in the first two weeks after the start of the U.S. and Israeli war against Iran as Iranian nation-state groups and independent hacktivists launch increasingly decentralized and destructive cyberattacks, which are expected to increase as long as the kinetic battle continues. First seen on securityboulevard.com Jump to…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
EU sanctions Chinese and Iranian actors over cyberattacks on critical infrastructure

Mar 18, 2026 12:11 AM

Tags: attack, china, cyber, cyberattack, infrastructure, iran

EU sanctions Chinese and Iranian firms and individuals for cyberattacks targeting critical infrastructure and over 65,000 devices across member states. The Council of the European Union has imposed sanctions on three companies and two individuals linked to cyberattacks against EU countries and partners. >>The Council adopted today restrictive measures against three entities and two individuals responsible for cyber-attacks carried…
Medusa ransomware gang claims attacks on prominent Mississippi hospital, New Jersey county

Mar 17, 2026 10:10 PM

Tags: attack, cyberattack, healthcare, ransomware

The Medusa ransomware operation has claimed a devastating cyberattack that knocked out systems at the biggest hospital in Mississippi for nine days. First seen on therecord.media Jump to article: therecord.media/medusa-ransomware-mississippi-cyber
Europe sanctions Chinese and Iranian firms for cyberattacks

Mar 17, 2026 8:10 PM

Tags: china, cyberattack, infrastructure, iran

The European Union Council has announced sanctions against three entities and two individuals for their involvement in cyberattacks targeting critical infrastructure in the region. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/europe-sanctions-chinese-and-iranian-firms-for-cyberattacks/
Stryker says it’s restoring systems after pro-Iran hackers wiped thousands of employee devices

Mar 17, 2026 6:10 PM

Tags: cyberattack, hacker, iran

The hack, which brought ongoing widespread disruption to the company’s operations, is thought to be the first major cyberattack in the United States in response to the Trump administration’s war in Iran. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/17/stryker-says-its-restoring-systems-after-pro-iran-hackers-wiped-thousands-of-employee-devices/
Cyber-Attacken fluten Eon-Netz: Angriffe verzehnfacht

Mar 17, 2026 3:10 PM

Tags: cyber, cyberattack, germany

Eon trägt eine große Verantwortung für die Energieversorgung in Deutschland.Der Energiekonzern Eon sieht eine zunehmende Zahl von Cyberangriffen auf seine Energienetze. Mittlerweile seien täglich mehrere hundert Angriffe auf die Netzinfrastuktur zu verzeichnen, berichtete Vorstandsmitglied Thomas König am Montag im Austausch mit Journalisten. Im Vergleich zu von vor fünf Jahren habe sich die Zahl damit verzehnfacht.Der Manager verwies in diesem…
EU sanctions Chinese company behind 65,000-device hack

Mar 17, 2026 2:10 PM

Tags: china, cyberattack, iran

The EU Council has sanctioned companies from China and Iran, along with two individuals, over cyberattacks targeting its member states and partners. “Those listed are subject … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/17/eu-sanctions-china-iran-cyberattacks/
Fertigungsindustrie ist Top-Ziel für Cyberangriffe – OT-Angriffe kommen meist über kompromittierte IT-Systeme

Mar 17, 2026 2:10 PM

Tags: cyberattack

First seen on security-insider.de Jump to article: www.security-insider.de/ot-angriffe-it-systeme-a-17e7fb999223bbf432dcddd28f12cfd0/
Chinesische APT-Gruppe Camaro Dragon nutzt Nahost-Konflikt für Malware-Kampagne gegen Katar aus

Mar 17, 2026 1:09 PM

Tags: apt, cyberattack, mail, malware, software

Check Point Research (CPR), die Sicherheitsforschungsabteilung von Check Point Software Technologies hat eine Malware-Kampagne beobachtet, die sich an Ziele in Katar richtet und Foto-Archive mit Bildern aus dem Konflikt in Nahost als Lockmittel nutzt, um Malware einzuschleusen. Kurz nach Beginn der Angriffe am 1. März beobachtete CPR gezielte, mutmaßlich per E-Mail durchgeführte Kampagnen gegen Einrichtungen…
Mehr Befugnisse, mehr Verantwortung Was aktive Cyberabwehr technisch bedeutet

Mar 17, 2026 1:09 PM

Tags: ciso, cyberattack

Ende Februar hat das Bundesinnenministerium einen Referentenentwurf des ‘Gesetz zur Stärkung der Cybersicherheit” veröffentlicht. Der Gesetzesentwurf stößt jedoch auf Kritik. Adam MarrÃ¨, CISO bei Arctic Wolf, teilt seine Gedanken zum geplanten Gesetz und dessen Bedeutung für die Cyberabwehr. ‘Angesichts der zunehmenden Zahl schwerer Cyberangriffe ist es nachvollziehbar, dass Regierungen ihre Möglichkeiten zur Abwehr digitaler Bedrohungen erweitern…
Cyberangriffe seit Iran-Krieg um 245 Prozent gestiegen

Mar 17, 2026 11:10 AM

Tags: cyberattack, infrastructure, iran

Der Sicherheitsanbieter Akamai meldet einen Zuwachs von 245 Prozent beim schädlichen Internetverkehr. Angreifer operieren vor allem über Proxy-Infrastruktur in Russland und China. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/cyberangriffe-seit-iran-krieg
Intuitive’s Certain Business, Employee, Corporate Data Accessed in Recent Breach

Mar 17, 2026 11:10 AM

Tags: access, attack, breach, business, corporate, credentials, cyberattack, data, login, phishing, unauthorized

Intuitive has disclosed a cyberattack involving a targeted phishing incident that led to unauthorized access to certain internal business systems. The company, known for its robotics-assisted surgical technologies, confirmed that attackers successfully obtained an employee’s login credentials through what can be described as a phishing attack, allowing them to infiltrate certain internal IT business applications.…
Attack on Stryker’s Microsoft environment wiped employee devices without malware

Mar 17, 2026 10:09 AM

Tags: attack, cyberattack, malware, microsoft, technology

The recent cyberattack on Stryker wiped tens of thousands of employee devices through its Microsoft environment, and systems are still offline. A recent cyberattack on medical technology giant Stryker targeted its internal Microsoft environment and remotely wiped tens of thousands of employee devices without using malware. The company confirmed that its medical devices were not…
ITStrategie: Warum Zero Trust und One Identity jetzt unverzichtbar sind

Mar 17, 2026 10:09 AM

Tags: cyberattack, germany, identity, strategy, vulnerability, zero-trust

Die meisten Cyberangriffen in der EU finden in Deutschland statt, und die Schwachstellen in den IT-Infrastrukturen nehmen täglich zu. Viele Unternehmen stehen daher vor der Frage, wie sie ihre IT-Sicherheit strategisch neu ausrichten können. Im Interview stellen Stefan Rothmeier und Sebastian Fuchs von T.CON das Konzept »Zero Trust« vor und erläutern, wie die Umsetzung gelingt. First…
Stryker Targeted by Large-Scale Wiper Attack, Tens of Thousands of Devices Lost

Mar 17, 2026 7:10 AM

Tags: attack, corporate, cyber, cyberattack, cybersecurity, group, iran, microsoft, technology

Global medical technology giant Stryker suffered a massive cybersecurity incident on March 11, 2026, resulting in the remote wiping of thousands of corporate devices. A pro-Iranian hacktivist group known as Handala has claimed responsibility for the attack, which severely disrupted Stryker’s internal Microsoft environment, manufacturing, and shipping operations. Technical Execution Vector Unlike traditional destructive cyberattacks,…
Health Sector Braces for Stryker Hack Supply Chain Shock

Mar 16, 2026 11:10 PM

Tags: cyberattack, healthcare, iran, supply-chain

Medical Device Manufacturer Hack Was Likely Opportunistic. An Iranian cyberattack on medical device maker Stryker’s internal IT environment does not appear to affect connected products used by the company’s healthcare clients. But an outage of Stryker’s electronic ordering system could lead to supply chain issues for its customers. First seen on govinfosecurity.com Jump to article:…
Stryker attack wiped tens of thousands of devices, no malware needed

Mar 16, 2026 9:10 PM

Tags: attack, cyberattack, malware, microsoft, technology

Last week’s cyberattack on medical technology giant Stryker was limited to its internal Microsoft environment and remotely wiped tens of thousands of employee devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/
Poland Suspects Iranian Actors are Behind Attack on Its Nuclear Power Center

Mar 16, 2026 8:09 PM

Tags: attack, country, cyberattack, group, iran, tactics, threat

Poland officials say the cyberattack late last week appears to have been launched by an Iranian threat group, though they noted that bad actors not associated with any country in the war could have been behind it and used tactics associated with Iranian threat groups to cover their own tracks. First seen on securityboulevard.com Jump…