Tag: Internet
-
IoT security challenges, issues and best practices
From smart homes and wearable fitness trackers to connected cars and industrial machinery, the Internet of Things (IoT) has become an inseparable part of our lives. With billions of devices already online and millions more joining everyday, IoT has transformed the way we live and work. But this hyperconnectivity comes at a price. Every new……
-
Surge in coordinated scans targets Microsoft RDP auth servers
Internet intelligence firm GreyNoise reports that it has recorded a significant spike in scanning activity consisting of nearly 1,971 IP addresses probing Microsoft Remote Desktop Web Access and RDP Web Client authentication portals in unison, suggesting a coordinated reconnaissance campaign. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/surge-in-coordinated-scans-targets-microsoft-rdp-auth-servers/
-
NIST Releases Lightweight Cryptography Standard for IoT Security
The National Institute of Standards and Technology (NIST) has formally published Special Publication 800-232, “Ascon-Based Lightweight Cryptography Standards for Constrained Devices,” establishing the first U.S. government benchmark for efficient cryptographic algorithms tailored to resource-constrained environments such as the Internet of Things (IoT), embedded systems, and low-power sensors. In February 2023, NIST selected the Ascon family…
-
Open Source AppLocker Policy Generator
Noch ein kleiner Fund aus dem Internet, der für Administratoren hilfreich sein kann, die mit AppLocker in Unternehmensumgebungen arbeiten, um Anwendungsrestriktionen zu setzen. Der AppLocker Policy Generator verspricht Systemadministratoren und Sicherheitsexperten bei der Erstellung und Verwaltung von AppLocker-Richtlinien zu unterstützen. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/24/applocker-policy-generator/
-
Cybersecurity Snapshot: Industrial Systems in Crosshairs of Russian Hackers, FBI Warns, as MITRE Updates List of Top Hardware Weaknesses
Tags: access, ai, attack, automation, cisa, cisco, cloud, conference, control, credentials, cve, cyber, cybersecurity, data, data-breach, deep-fake, detection, docker, espionage, exploit, flaw, framework, fraud, google, government, group, guide, hacker, hacking, Hardware, identity, infrastructure, intelligence, Internet, iot, LLM, microsoft, mitigation, mitre, mobile, network, nist, risk, russia, scam, service, side-channel, software, strategy, switch, technology, threat, tool, update, vulnerability, vulnerability-management, windowsCheck out the FBI’s alert on Russia-backed hackers infiltrating critical infrastructure networks via an old Cisco bug. Plus, MITRE dropped a revamped list of the most important critical security flaws. Meanwhile, NIST rolled out a battle plan against face-morphing deepfakes. And get the latest on the CIS Benchmarks and on vulnerability prioritization strategies! Here are…
-
AI Agents Need Data Integrity
Think of the Web as a digital territory with its own social contract. In 2014, Tim Berners-Lee called for a “Magna Carta for the Web” to restore the balance of power between individuals and institutions. This mirrors the original charter’s purpose: ensuring that those who occupy a territory have a meaningful stake in its governance.…
-
Oracle-CSO mit überraschendem Abgang
Die CSO von Oracle, Mary Ann Davidson, verlässt das Unternehmen. Die langjährige CSO (Chief Security Officer) von Oracle, Mary Ann Davidson, verlässt das Unternehmen unerwartet und beendet damit ihre fast vier Jahrzehnte währende Karriere in der Geschäftsleitung des Software-Giganten. Eine interne Quelle des Unternehmens spielte diese Information dem Nachrichtenprotal Bloomberg zu.Davidson, die ihre Karriere 1988…
-
HTTPS-Traffic blockiert: Große Firewall schneidet China vom weltweiten Internet ab
Chinas Große Firewall hat vorübergehend fast den gesamten HTTPS-Datenverkehr zu anderen Ländern gekappt. Der Grund dafür ist unklar. First seen on golem.de Jump to article: www.golem.de/news/https-traffic-blockiert-grosse-firewall-schneidet-china-vom-weltweiten-internet-ab-2508-199427.html
-
Anthropic scanning Claude chats for queries about DIY nukes for some reason
Because savvy terrorists always use public internet services to plan their mischief, right? First seen on theregister.com Jump to article: www.theregister.com/2025/08/21/anthropic_claude_nuclear_chat_detection/
-
Threat Actors Abuse Internet Archive to Host Stealthy JScript Loader
An Malicious actors are using reliable internet resources, such as the Internet Archive, more frequently to disseminate clandestine malware components in a worrying increase in cyberthreats. This tactic exploits the inherent trustworthiness of such platforms, allowing attackers to bypass traditional security filters and deliver payloads under the guise of legitimate content. The latest incident highlights…
-
China cut itself off from the global internet for an hour on Wednesday
Great Firewall took out all traffic to port 443 at a time Beijing didn’t have an obvious need to keep its netizens in the dark First seen on theregister.com Jump to article: www.theregister.com/2025/08/21/china_port_443_block_outage/
-
Russian cyber group exploits seven-year-old network vulnerabilities for long-term espionage
The group, linked to FSB Center 16, has been scanning the internet for end-of-life software, which it has found in droves. First seen on cyberscoop.com Jump to article: cyberscoop.com/russian-static-tundra-hacks-cisco-network-devices-cve-2018-0171/
-
Oregon Man Charged in Global “Rapper Bot” DDoSHire Scheme
A massive cybercrime operation tied to one of the internet’s most powerful DDoS-for-hire botnets, Rapper Bot, has been brought down, and at the center of the case is a 22-year-old man from Eugene, Oregon. According to a federal criminal complaint filed on August 6, 2025, in the District of Alaska, Ethan Foltz is alleged to…
-
IoT Security
As the Internet of Things (IoT) continues to transform industries and daily lives, security has become one of the most critical challenges organizations face. From smart homes and connected cars to industrial systems and healthcare devices, IoT ecosystems are vast and deeply integrated into business operations and personal environments. However, with this rapid adoption comes…
-
Verborgene Spillover-Effekte – Erhebliche wirtschaftliche Kosten durch Netzsperren im Internet
Tags: InternetFirst seen on security-insider.de Jump to article: www.security-insider.de/wirtschaftliche-auswirkungen-netzsperren-studie-a-8f422dbca2629c756e36c1923bd32bf8/
-
Watchguard zur it-sa 2025 Real-Security for the Real-World
Von Firecloud-Internet-Access über Total-MDR bis hin zu den zuletzt vorgestellten Modellen der Watchguard-Tabletop-Firewall-Appliances: Alle Lösungen, mit denen Watchguard sein Produktportfolio in jüngster Zeit ergänzt hat, folgen nur einem Ziel. Es geht darum, den Alltag von IT-Verantwortlichen in mittelständischen Unternehmen und Managed-Security-Providern (MSP), die diesen mit Rat und Tat zur Seite stehen, zu vereinfachen. Die neuen…
-
Internet-wide Vulnerability Enables Giant DDoS Attacks
A good chunk of all websites today have been affected by the biggest DDoS risk on the Web since 2023. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/internet-wide-vulnerability-giant-ddos-attacks
-
UK’s Colt hit by cyberattack, support systems offline amid ransom threat
Tags: api, attack, china, communications, cve, cyberattack, data, data-breach, exploit, finance, flaw, group, infrastructure, Internet, microsoft, network, programming, ransom, rce, remote-code-execution, russia, service, software, threat, update, vulnerabilitywith samples on a Russian Tor site.”We’ve seen already this year that telecom is particularly vulnerable to attacks, and I think this WarLock attack highlights some recurring issues that telecom and large-scale network service providers are starting to see,” said Gabrielle Hempel, Security Operations Strategist at Exabeam. “There’s this operational ripple effect when you’re a…
-
Hundreds of TeslaMate Servers Expose Real-Time Vehicle Data
A security researcher has discovered that hundreds of self-hosted TeslaMate servers are exposing sensitive Tesla vehicle data to the public internet without any authentication, revealing real-time location tracking, charging patterns, and driving habits of unsuspecting owners. TeslaMate is a popular open-source data logger that connects to Tesla’s official API to collect detailed vehicle telemetry including…
-
Digitale Souveränität für Deutschland vorerst unerreichbar
Tags: access, ai, bsi, chatgpt, china, cloud, computer, cyersecurity, encryption, germany, google, governance, government, hacker, injection, Internet, risk, strategy, update, usaBSI-Präsidentin Plattner: “Wir haben technologische Abhängigkeiten an ganz vielen Stellen.” Jan WaßmuthSeine Abhängigkeit von Cloud-Lösungen, KI-Modellen und anderen Tech-Produkten aus dem Ausland wird Deutschland nach Einschätzung des Bundesamtes für Sicherheit in der Informationstechnik (BSI) so bald nicht überwinden. Da der Staat seine digitalen Systeme und Daten bis auf weiteres nicht ohne Input aus dem außereuropäischen…
-
Reddit Blocks Internet Archive Amid AI Data Scraping Concerns
Reddit has announced it will restrict the Internet Archive’s Wayback Machine from accessing most of its content, citing concerns about AI companies exploiting the digital preservation service to scrape data in violation of platform policies. The move significantly limits what portions of Reddit can be archived for future reference. Major Access Restrictions Implemented The social…
-
What the Matter 1.4.2 update means for smart home security
Matter is built on the idea that smart home devices should be secure, reliable, and easy to use. It is based on Internet Protocol (IP), which allows devices, mobile apps, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/11/matter-1-4-2-smart-home-security/
-
SoupDealer Malware Evades Sandboxes, AVs, and EDR/XDR in Real-World Attacks
The SoupDealer malware has successfully bypassed nearly all public sandboxes and antivirus solutions, with the exception of Threat.Zone, while also evading endpoint detection and response (EDR) and extended detection and response (XDR) systems in documented real-world incidents. This advanced threat has inflicted significant damage across various sectors, including banks, internet service providers (ISPs), and mid-level…
-
Ghanaian fraudsters arrested for BEC/Sakawa
In Nigeria, scammers who specialize in Romance Scams and BEC are called “Yahoo Boys.” In Ghana, the term for the same activity is “Sakawa.” Several Ghanaian headlines are talking about this case with headlines such as “Multimillion dollar Sakawa” or “Sakawa Chairman Busted” or “Sakawa Kingpin Bows to Extradition!” On 08AUG2025 the US Attorney’s office…
-
Smartphone-Sicherheit Drei unerlässliche Verhaltensregeln
Ein jeder hat es und fast jeder nutzt es online das Smartphone. Durch die Verbindung zum Internet und die Nutzung für sensible Prozesse wie Banking und diverse Identifikationsverfahren ist es allerdings auch ein begehrtes Ziel für Phishing-Attacken und Malware. Genaugenommen sind es die Daten, die hierbei abgegriffen und von kriminellen Kräften missbraucht werden. Davor […]…
-
Over 28,000 Microsoft Exchange Servers Exposed Online to CVE-2025-53786 Vulnerability
Tags: access, cve, cvss, cyber, cybersecurity, data, data-breach, flaw, Internet, microsoft, threat, vulnerabilityThe cybersecurity community faces a significant threat as scanning data reveals over 28,000 unpatched Microsoft Exchange servers remain exposed on the public internet, vulnerable to a critical security flaw designated CVE-2025-53786. This high-severity vulnerability, which carries a CVSS score of 8.0 out of 10, enables attackers with administrative access to on-premises Exchange servers to escalate…
-
French firm Bouygues Telecom suffered a data breach impacting 6.4M customers
Bouygues Telecom suffered a cyberattack that compromised the personal information of 6.4 million customers. French telecommunications company Bouygues Telecom suffered a cyberattack that resulted in the compromise of personal information of 6.4 million customers. Bouygues Telecom, part of the Bouygues industrial group, is one of France’s leading telecom providers, offering mobile, internet, and IPTV services.…
-
Axis Security Camera Flaws Enable Remote Takeover
4 Bugs Affecting at Least 6,500 Camera Servers Enable Pre-Auth Attacks on Devices. Researchers who uncovered four severe flaws in Axis Communications’ video management and camera software say thousands of internet-connected surveillance systems are vulnerable to remote attacks. Attackers can execute arbitrary code without authentication. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/axis-security-camera-flaws-enable-remote-takeover-a-29149