Tag: Hardware
-
Linux 6.15 Launches with Major Performance and Hardware Upgrades
The Linux 6.15 kernel, released on May 25, 2025, marks a pivotal moment in open-source development, introducing several groundbreaking features and technical advancements. Most notably, this release debuts the first Rust-written Direct Rendering Manager (DRM) driver, NOVA, targeting NVIDIA RTX 2000 “Turing” series and newer GPUs. The NOVA driver, written entirely in Rust, represents a…
-
Crypto Drainers are Targeting Cryptocurrency Users
Some key recommendations for protecting crypto wallets include: 1. Enable multifactor authentication (2FA or MFA) when available on your wallets 2. Use hardware wallets or cold wallets for maximum security 3. Don’t be phished or socially engineered! Never click a questionable link, install untrusted software, or provide your private keys! 4. Avoid browser extensions! They can…
-
Operation Endgame 2.0: DanaBusted
Tags: access, attack, backup, banking, breach, business, cloud, communications, control, crypto, cybercrime, data, defense, detection, email, espionage, firewall, fraud, government, group, Hardware, infection, intelligence, international, law, malicious, malware, middle-east, network, programming, ransomware, russia, service, supply-chain, switch, threat, tool, ukraine, update, windowsIntroductionOn May 22, 2025, international law enforcement agencies released information about additional actions that were taken in conjunction with Operation Endgame, an ongoing, coordinated effort to dismantle and prosecute cybercriminal organizations, including those behind DanaBot. This action mirrors the original Operation Endgame, launched in May 2024, which disrupted SmokeLoader, IcedID, SystemBC, Pikabot, and Bumblebee. Zscaler…
-
Passwortfreie Authentifizierung: So gelingt der Umstieg auf PKI
Tags: access, authentication, bug, cyberattack, Hardware, infrastructure, mail, mfa, nis-2, password, phishing, ransomware, service, vpnDie zertifikatsbasierte Authentifizierung mit PKI erfolgt via physischen Token statt Passwort.Die Bedrohungslage im Cyberraum verschärft sich stetig. Immer mehr Unternehmen sind mit Angriffen konfrontiert von Phishing-Kampagnen bis hin zu Ransomware-Attacken. Zudem verlangen Gesetzgeber mit Vorschriften wie NIS-2 ein hohes Maß an Sicherheit und Nachvollziehbarkeit der Authentifizierung. Herkömmliche Methoden wie Passwörter oder SMS-TANs sind den steigenden…
-
Bitlocker-Verschlüsselung über Bitpixie (CVE-2023-21563) ausgehebelt
Die von Microsoft für Windows verwendete Bitlocker-Verschlüsselung für Datenträger lässt sich über die Bitpixie-Schwachstelle (CVE-2023-21563) per Software aushebeln, wenn gewisse Randbedingungen gelten. Ein Sicherheitsforscher hatn gezeigt, wie sich der Master-Key, bei fehlender Pre-Boot-Authentifizierung unter Windows binnen Minuten, ohne Hardware-Hack, aus … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/18/windows-bitlocker-verschluesselung-ueber-bitpixie-cve-2023-21563-ausgehebelt/
-
Palo Alto Networks Should See ‘Continued Solid Demand’ For Hardware Firewalls: Analyst
Tariffs and government efficiency measures appear to have had ‘no impact whatsoever’ on major cybersecurity vendors including Palo Alto Networks, according to TD Cowen’s Shaul Eyal. First seen on crn.com Jump to article: www.crn.com/news/security/2025/palo-alto-networks-should-see-continued-solid-demand-for-hardware-firewalls-analyst
-
Nobara Linux 42 brings performance boost and better hardware support
The Nobara Project has released a new version of its Linux distribution, bringing updated packages, performance improvements, and a few visual tweaks aimed at making life … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/14/nobara-linux-42-released/
-
Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)
5Critical 66Important 0Moderate 0Low Microsoft addresses 71 CVEs including seven zero-days, five of which were exploited in the wild. Microsoft patched 71 CVEs in its May 2025 Patch Tuesday release, with five rated critical and 66 rated as important. This month’s update includes patches for: .NET, Visual Studio, and Build Tools for Visual Studio Active…
-
Driverhub: Asus-Tool lässt Webseiten Malware als Admin ausführen
Driverhub hält auf PCs mit Asus-Hardware die Treiber aktuell. Mit älteren Versionen können Angreifer aber auch Schadsoftware unterschieben. First seen on golem.de Jump to article: www.golem.de/news/driverhub-asus-treiberverwaltung-laesst-hacker-malware-einschleusen-2505-196130.html
-
FBI warns that end of life devices are being actively targeted by threat actors
Tags: access, antivirus, attack, authentication, botnet, china, cisco, control, credentials, cve, data-breach, exploit, firewall, firmware, Hardware, identity, infection, intelligence, Internet, malware, network, password, router, sans, service, software, technology, threat, tool, update, vulnerabilityLinksys E1200, E2500, E1000, E4200, E1500, E300, E3200, E1550, WRT320N, WRT310N, WRT610NCradlepoint E100Cisco M10Threat actors, notably Chinese state-sponsored actors, are successfully exploiting known vulnerabilities in routers exposed to the web through pre-installed remote management software, according to the FBI. They then install malware, set up a botnet, and sell proxy services or launch coordinated attacks.”The…
-
MCP: A Comprehensive Guide to Extending AI Capabilities
Model Context Protocol is doing for AI what USB did for hardware and HTTP did for the web”, creating a universal standard that exponentially expands capabilities. Understand how this innovation allows AI systems to access specialized tools without custom integration. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/mcp-a-comprehensive-guide-to-extending-ai-capabilities/
-
CVE funding crisis offers chance for vulnerability remediation rethink
Tags: access, ai, awareness, best-practice, cisa, cve, cvss, cybersecurity, data, exploit, Hardware, healthcare, intelligence, iot, kev, least-privilege, metric, mfa, microsoft, network, open-source, penetration-testing, risk, software, threat, tool, training, update, vulnerability, vulnerability-managementAutomatic for the people: AI technologies could act as a temporary bridge for vulnerability triage, but not a replacement for a stable CVE system, according to experts consulted by CSO.”Automation and AI-based tools can also enable real-time discovery of new vulnerabilities without over-relying on standard CVE timelines,” said Haris Pylarinos, founder and chief executive of…
-
Raspberry Pi slices Compute Module 4 prices
Tags: HardwareGrab more headroom with the 4 and 8 GB variants First seen on theregister.com Jump to article: www.theregister.com/2025/05/02/raspberry_pi_cm4_cuts/
-
Trump wants to fire quarter of NASA budget into black hole and not in a good way
Tags: HardwareProposed cuts would mean: No Lunar Gateway, Artemis hardware to retire, ISS toast in 2030 First seen on theregister.com Jump to article: www.theregister.com/2025/05/02/nasa_funding_slashed/
-
Human Insight Is Key to Securing Cyber-Physical Systems
Politecnico di Milano’s Zanero on Evolving Malware Detection and Hardware Security. Machine learning excels at identifying repetitive patterns and anomalies, but human insight remains vital for understanding the broader context of cyberattacks – especially in cyber-physical ecosystems, said Stefano Zanero, professor at Politecnico di Milano. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/human-insight-key-to-securing-cyber-physical-systems-a-28262
-
Product showcase: Ledger Flex secure crypto wallet
The Ledger Flex is a hardware wallet designed for the secure storage of cryptocurrencies and NFTs. It combines security features with a user-friendly interface, making it … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/30/product-showcase-ledger-flex-secure-crypto-wallet/
-
Securing the invisible: Supply chain security trends
Adversaries are infiltrating upstream software, hardware, and vendor relationships to quietly compromise downstream targets. Whether it’s a malicious update injected into a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/30/supply-chain-security-trends/
-
Enterprise-specific zero-day exploits on the rise, Google warns
Tags: access, apple, apt, attack, china, cisco, cloud, crime, crimes, cyberespionage, detection, endpoint, exploit, finance, flaw, google, group, Hardware, incident response, injection, Internet, ivanti, korea, lessons-learned, mandiant, microsoft, mitigation, network, north-korea, remote-code-execution, russia, service, strategy, technology, threat, tool, update, vpn, vulnerability, zero-daySurge in network edge device exploitation: Of the 33 zero-day vulnerabilities in enterprise-specific products, 20 targeted hardware appliances typically located at the network edge, such as VPNs, security gateways, and firewalls. Notable targets last year included Ivanti Cloud Services Appliance, Palo Alto Networks’ PAN-OS, Cisco Adaptive Security Appliance, and Ivanti Connect Secure VPN.Targeted attacks against…
-
SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients
Cybersecurity company SentinelOne has revealed that a China-nexus threat cluster dubbed PurpleHaze conducted reconnaissance attempts against its infrastructure and some of its high-value customers.”We first became aware of this threat cluster during a 2024 intrusion conducted against an organization previously providing hardware logistics services for SentinelOne employees,” security First seen on thehackernews.com Jump to article:…
-
2025 The International Year of Quantum Science and Technology
Tags: access, attack, cloud, compliance, computer, conference, crypto, cryptography, cybersecurity, data, encryption, finance, government, group, Hardware, infrastructure, international, lessons-learned, network, nist, regulation, risk, risk-assessment, software, strategy, technology, tool2025 The International Year of Quantum Science and Technology divya Tue, 04/29/2025 – 07:48 It is no surprise that the United Nations declared 2025 as the International Year of Quantum Science and Technology (IYQ). Not only does it mark the 100-year point since quantum physics were discovered, but for those who have been following, the…
-
Post-Quantum-Kryptografie und Simulator für Migrationstests – Quantumresistenz für Utimaco-Hardware
Tags: HardwareFirst seen on security-insider.de Jump to article: www.security-insider.de/quantumresistenz-fuer-utimaco-hardware-a-115af96196bf9a6adafbfd00275522d8/
-
IT-Security ist keine Vertrauenssache
G Data warnt davor, die Komplexität heutiger Bedrohungsszenarien zu unterschätzen.Geht es um Cybersicherheit, fühlt sich die Mehrheit der Anwender bei ihren IT-Kollegen gut aufgehoben. Knapp acht von zehn Beschäftigten in Deutschland (78 Prozent) sind überzeugt, dass die IT-Abteilung den aktuellen Anforderungen an eine effektive IT-Sicherheit gewachsen ist. Zu diesem Ergebnis kommt zumindest die Studie ‘Cybersicherheit in…
-
What is the xBOM?
Tags: cloud, cryptography, cyber, Hardware, international, resilience, risk, sbom, service, software, supply-chain, technology, tool