Tag: software
-
OkoBot greift Kryptowallets an und tarnt sich als legitime Software
Kaspersky warnt vor einem neuen Malware-Framework, das gezielt auf Kryptowährungsnutzer und Entwickler abzielt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/okobot-kryptowallets-an
-
AnyDesk Zero-Day Flaw Allows Local Attackers to Trigger System-Wide DenialService
A newly disclosed zero-day vulnerability in AnyDesk has the potential to allow a local attacker to trigger a denial-of-service condition by exploiting the remote-access software’s “Send Support Information” feature. The advisory, tracked as ZDI-26-401 and ZDI-CAN-26645, was published by Trend Micro’s Zero Day Initiative (ZDI) on July 8, 2026. The flaw has been assigned CVE-2026-15682…
-
KI-Sicherheit erfordert kontinuierliches Red-Teaming
Check Point Software Technologies beschreibt ein zentrales Problem moderner KI-Sicherheit: Ein bestandener Sicherheitstest ist kein dauerhafter Nachweis für Sicherheit. Er gilt nur für ein bestimmtes System, eine konkrete Konfiguration und einen bestimmten Zeitpunkt. Produktive KI-Systeme verändern sich jedoch laufend: Modelle passen ihr Verhalten an, Prompts werden überarbeitet, Retrieval-Quellen kommen hinzu, Agenten erhalten neue Tools und…
-
CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance
On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and four allied cyber authorities published a guide telling software vendors how to build a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/16/cisa-coordinated-vulnerability-disclosure-guidance/
-
OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data
Kaspersky says OkoBot targets crypto users through fake software, stealing wallet files, seed phrases and passwords while recording activity inside wallet apps. First seen on hackread.com Jump to article: hackread.com/okobot-malware-clickfix-browser-extensions-crypto-data/
-
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland RAT. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/russian-hackers-trojanize-webex-zoom-apps-to-push-starland-malware/
-
Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts Remotely
Zoom has disclosed a critical vulnerability in its Windows desktop software that could allow unauthenticated attackers to take over user accounts remotely. This issue, tracked as CVE-2026-53412 and addressed in bulletin ZSB-26014, arises from improper input validation in Zoom Workplace for Windows and the Zoom Workplace VDI Client for Windows. The vulnerability has a CVSS…
-
Critical JetBrains Flaws Impact IntelliJ IDEA, TeamCity, and YouTrack Users
JetBrains has released security updates for IntelliJ IDEA, TeamCity, and YouTrack that address six vulnerabilities, including a critical path traversal issue that could enable code execution in IntelliJ IDEA. The fixes affect core developer tooling, CI/CD infrastructure, and issue-tracking environments, making prompt patching important for organizations that use JetBrains products in software development workflows. The…
-
Nearly 300 GitHub repos pose as legit software to push malware
A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malware/
-
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments.”LabubaRAT creates a reusable foothold for hands-on activity,” Blackpoint Cyber researchers Sam Decker and Nevan Beal said in an analysis published today. “Once deployed, it can profile the host, First seen on…
-
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments.”LabubaRAT creates a reusable foothold for hands-on activity,” Blackpoint Cyber researchers Sam Decker and Nevan Beal said in an analysis published today. “Once deployed, it can profile the host, First seen on…
-
Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown
Progress Software has confirmed that a high-severity zero-day vulnerability is behind the emergency shutdown of ShareFile Storage Zone Controllers last week and has released security updates to patch the flaw. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/progress-confirms-sharefile-zero-day-flaw-behind-storage-zone-shutdown/
-
Künstliche Intelligenz schreibt die Regeln für autonome Cyberangriffe und -abwehr neu
Check Point Software Technologies hat seinen ‘Annual AI Security Report 2026″ von Check Point Research veröffentlicht. Dieser dokumentiert einen entscheidenden Wandel der letzten zwölf Monate: Künstliche Intelligenz (KI) fungiert bei Angriffen nicht mehr nur als Assistent, sondern agiert mittlerweile als ausführender Akteur. Wo KI Kriminellen früher lediglich bei der Vorbereitung half, führt sie jetzt Live-Angriffsversuche…
-
Why programming true randomness in emulators is a developer worst nightmare
Asking a deterministic machine to behave indeterministically is the cleanest paradox in software engineering, and emulator developers live inside it every working day. The job description sounds reasonable until you read it twice: recreate, with mathematical precision, a piece of silicon that was never mathematically precise to begin with, reproducing on commodity hardware the analog…
-
Progress Warns of ShareFile Storage Zone Controller Threat
Tags: softwareProgress Software is urging organizations to immediately shut down ShareFile Storage Zone Controllers. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/progress-warns-of-sharefile-storage-zone-controller-threat/
-
Progress Urges ShareFile Shutdown Over ‘Credible’ Threat
Honeypot Records Exploitation Attempt Against Flaw Patched Earlier This Year. Progress Software has issued a security alert to all organizations using self-managed instances of ShareFile Storage Zone Controller, advising them to immediately power down their servers in light of a credible external security threat to their data. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/progress-urges-sharefile-shutdown-over-credible-threat-a-32210
-
Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers
A >>credible external security threat<< targeting Progress Software's ShareFile Storage Zone Controllers (SZC) the on-premises, customer-managed server … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/13/progress-sharefile-security-threat/
-
Progress Software Warns of External Security Threat to ShareFile
Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/progress-warns-security-threat/
-
AI-generated code has made security debt a governance problem
Moving from tool approval to true governance is the only way for CISOs to keep pace with the accelerating velocity of software risk. First seen on cyberscoop.com Jump to article: cyberscoop.com/governing-ai-code-security-risks-op-ed/
-
Schutz von Open Source Software in KRITIS – Linux Foundation startet Brancheninitiative Akrites
First seen on security-insider.de Jump to article: www.security-insider.de/linux-foundation-startet-brancheninitiative-akrites-a-13bea32919c906bc6aa25fbc37695cab/
-
Why SBOMs, signing, and provenance still don’t tell you if software is safe
We have made real progress in software supply chain security, improving visibility into software components, authenticity and build integrity. Much of this progress traces … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/13/sbom-zero-trust-for-code/
-
Vier Wahrheiten über Updates in der IT, die sich selbst widersprechen
Software-Updates können bei IT-Experten eine ganze Bandbreite an Emotionen auslösen, von Kopfschmerzen durch die ungewissen Folgen, über Stress durch akuten Handlungsdruck, bis hin zu Erleichterung, wenn kritische Lücken endlich geschlossen sind. Der IT-Dienstleister Avision hat sich genauer angeschaut, warum Updates eigentlich so eine paradoxe Wirkung haben und wie mögliche Best Practices aussehen könnten. Das… First…
-
Researcher finds 9 vulnerabilities in ATM security software
First seen on scworld.com Jump to article: www.scworld.com/brief/researcher-finds-nine-vulnerabilities-in-atm-security-software
-
Progress Software warns ShareFile users of external security threat
First seen on scworld.com Jump to article: www.scworld.com/brief/progress-software-warns-sharefile-users-of-external-security-threat
-
As Global Conflicts Go Digital, Businesses Need Wartime Gameplans
The fate of a Ukrainian tax software company shows how modern cyberwarfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/businesses-wartime-cybersecurity-gameplans
-
Software-Fertigung im Fadenkreuz
Am 18. Mai 2026 injizierte eine automatisierte Angriffskampagne innerhalb von nur sechs Stunden 5.718 bösartige Commits in 5.561 GitHub Repositories. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cloud-security/software-fertigung-im-fadenkreuz
-
HP Linux Imaging and Printing Software Flaw Enables Privilege Escalation Attacks
A critical vulnerability has been discovered in HP Linux Imaging and Printing Software (HPLIP), which exposes Linux systems to potential privilege escalation and remote code execution attacks. This vulnerability, tracked as CVE-2026-14544, has a CVSS v3 score of 9.8, indicating maximum severity due to its potential for network exploitation, low attack complexity, and lack of…
-
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy.According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first publicly spotted in the wild on May 21, 2026. It’s assessed to…
-
‘GodDamn’ Ransomware Uses BYOVD to Smite US Companies
Microsoft co-signed a malicious kernel driver, and now it’s being used to kill security software in ransomware attacks. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/goddamn-ransomware-byovd-smite-companies
-
GitHub Copilot IDE Coding Agents Vulnerable to Workflow-Level Jailbreak Attacks
GitHub Copilot’s new coding agents, which are integrated into IDEs, are susceptible to a specific type of >>workflow-level<< jailbreak attacks. These attacks can bypass chat refusals, allowing agents to generate harmful code while performing standard software development tasks unwittingly. According to Arxiv, researchers who studied Copilot in Visual Studio Code discovered that models that successfully…