Collecting Cyber-News from over 60 sources

Tag: software

The CISO succession crisis: why companies have no plan and how to change that

Aug 28, 2025 10:23 AM

Tags: access, attack, business, ceo, cio, ciso, compliance, control, corporate, cyber, cybersecurity, data, email, flaw, framework, fraud, governance, jobs, phishing, privacy, risk, risk-management, skills, software, technology, threat, training

The technical-to-strategic divide: One major obstacle keeping many mid-level security pros from becoming CISOs isn’t their tech skills, it’s learning to shift from doing hands-on security work to acting as strategic business partners. That change takes a whole new set of skills and a different way of thinking.”I think you see this with a lot…
New TamperedChef Attack Uses Weaponized PDF Editor to Steal Sensitive Data and Login Credentials

Aug 28, 2025 10:23 AM

Tags: attack, credentials, cyber, cybersecurity, data, login, malicious, malware, software, threat, tool

Cybersecurity researchers at Truesec have uncovered a sophisticated malware campaign distributing a weaponized PDF editor under the guise of >>AppSuite PDF Editor.
7 Anzeichen für akuten MSSP-Bedarf

Aug 28, 2025 6:24 AM

Tags: best-practice, ceo, ciso, compliance, cyber, cybersecurity, data, incident, incident response, intelligence, mssp, service, soc, software, threat, tool, update

Managed Security Service Provider können das Sicherheitsniveau nachhaltig steigern.Ein Managed Security Service Provider (MSSP) bietet seinen Kunden ein umfassendes Spektrum an Sicherheits-Services. Als Drittanbieter kann ein MSSP die Arbeitsbelastung der internen IT-Teams deutlich reduzieren und Zeit freisetzen, um sich mit essenziellen Unternehmensprozessen und strategischen Überlegungen auseinanderzusetzen. Darüber hinaus kann ein MSSP unter anderem auch dazu…
DOE Still Blind to Its Own Software Supply Chain Risks

Aug 27, 2025 11:23 PM

Tags: risk, software, supply-chain

IG Report Flags Widespread Gaps in DOE’s Software Supply Chain Security. An audit of the Department of Energy found failures in supply chain risk practices, with multiple contractor sites lacking basic policies, verification mechanisms and visibility into the actual software running on critical systems. Three locations lacked formal policies. First seen on govinfosecurity.com Jump to…
AI, Malware, and the Rise of Software Development Infiltration

Aug 27, 2025 9:23 PM

Tags: ai, malicious, malware, open-source, programming, software
TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski

Aug 27, 2025 8:23 PM

Tags: access, ai, attack, backdoor, breach, business, ciso, computer, country, crime, crimes, cyber, cybercrime, cybersecurity, data-breach, defense, detection, edr, email, finance, firewall, gartner, government, guide, hacker, hacking, Hardware, infosec, Internet, jobs, linkedin, mail, malicious, microsoft, military, monitoring, network, password, phishing, phone, privacy, programming, ransomware, risk, russia, scam, skills, software, sophos, spam, sql, strategy, switch, technology, threat, update, virus, vulnerability, wifi, windows

Summary “The Defenders Log” Episode 1 features host David Redekop and guest Chet Wisniewski discussing the dynamic world of cybersecurity. Wisniewski, with decades of experience, traces his journey from early BBS and phone network exploration to becoming a cybersecurity expert. They delve into the evolution of hacking, the emergence of profitable cybercrime like email spam,…
Whistleblower: DOGE put Social Security database covering 300 million Americans on insecure cloud

Aug 27, 2025 8:23 PM

Tags: access, ai, attack, cio, ciso, cloud, compliance, computer, control, data, data-breach, fraud, government, law, nist, privacy, risk, service, software, technology, unauthorized

Did the DOGE workers violate the law?: Under the Federal Information Security Management Act (FISMA), all information systems operated by or on behalf of the US federal government must obtain an authorization to operate (ATO). The purpose of an ATO is to minimize the security risks to which those systems might be exposed.Complying with the…
CISA Strengthens Software Procurement Security With New Tool

Aug 27, 2025 7:23 PM

Tags: cisa, guide, software, tool

CISA has launched a new Software Acquisition Guide Web Tool to enhance security in software procurement First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-software-procurement-security/
Why zero trust is never ‘done’ and is an ever-evolving process

Aug 27, 2025 5:23 PM

Tags: exploit, resilience, software, supply-chain, tool, zero-trust

Zero trust isn’t a project you finish”, it’s a cycle that keeps evolving. From supply chain exploits to policy drift, resilience requires continuous testing and adaptation. Learn how Specops Software supports this journey with tools that make it easier. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/why-zero-trust-is-never-done-and-is-an-ever-evolving-process/
Neues Passwort-Tool für mehr Sicherheit und weniger Helpdesk-Aufwand bei Cloud-Infrastrukturen

Aug 27, 2025 4:24 PM

Tags: cloud, infrastructure, password, service, software, tool

Specops Software, ein Unternehmen von Outpost24 und einer der führenden Anbieter für Passwortmanagement und Benutzerauthentifizierung, erweitert seine Cloud-Services. Als Self-Service-Funktion ermöglicht , jederzeit und von überall eigenständig Passwörter auf Unternehmensniveau direkt in der Cloud-Infrastruktur zurückzusetzen. Das Tool wird ab sofort zusammen mit dem Specops-Secure-Service-Desk für Kunden angeboten, die vollständig auf die Entra-ID-Cloud umgestellt haben. […]…
Hundreds of Swedish municipalities impacted by suspected ransomware attack on IT supplier

Aug 27, 2025 3:23 PM

Tags: attack, country, ransomware, software

A suspected ransomware attack on a Swedish software provider is believed to have impacted around 200 of the country’s municipal governments. First seen on therecord.media Jump to article: therecord.media/sweden-municipalities-ransomware-software
Schadcode im Anmarsch: Aktiv ausgenutzte Git-Lücke gefährdet Entwickler

Aug 27, 2025 1:24 PM

Tags: bug, exploit, software

Wer Git im Einsatz hat, sollte die Software dringend aktualisieren. Angreifer bedienen sich einer Sicherheitslücke, um Schadcode einzuschleusen. First seen on golem.de Jump to article: www.golem.de/news/schadcode-im-anmarsch-aktiv-ausgenutzte-git-luecke-gefaehrdet-entwickler-2508-199559.html
New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over Devices

Aug 27, 2025 11:23 AM

Tags: ai, phishing, software, tactics

Abnormal AI said the campaign, which lures victims into downloading legitimate RMM software, marks a major evolution in phishing tactics First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/phishing-abuses-connectwise-take/
Citrix NetScaler ADC and Gateway Hit by Ongoing Attacks Exploiting 0-Day RCE

Aug 27, 2025 7:23 AM

Tags: attack, citrix, cloud, cve, cyber, exploit, group, rce, remote-code-execution, risk, service, software, vulnerability, zero-day

Cloud Software Group has issued an emergency security bulletin warning of active exploitation targeting three critical vulnerabilities in NetScaler ADC and NetScaler Gateway products. The vulnerabilities, tracked asCVE-2025-7775,CVE-2025-7776, andCVE-2025-8424, present severe security risks including remote code execution and denial of service capabilities. Active Exploitation Confirmed The most severe vulnerability,CVE-2025-7775, carries aCVSS v4.0 score of 9.2and has been…
New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

Aug 26, 2025 8:23 PM

Tags: 5G, attack, group, open-source, phone, software, technology

A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station (gNB).The attack, per the ASSET (Automated Systems SEcuriTy) Research Group at the Singapore University of Technology and Design (SUTD), relies on a new open-source software toolkit…
Überwachungssoftware: Kritik an Dobrindts Haltung zu Palantir-Software

Aug 26, 2025 7:22 PM

Tags: software

Dobrindts krampfhaftes Festhalten an Palantir sei verantwortungslos. Der Bundesinnenminister sieht dagegen keine Probleme. First seen on golem.de Jump to article: www.golem.de/news/ueberwachungssoftware-kritik-an-dobrindts-haltung-zu-palantir-software-2508-199541.html
Sicherheitsrisiken bei Microsoft-365 Manipulation von E-Mail-Regeln, Formularen und Konnektoren

Aug 26, 2025 6:23 PM

Tags: mail, microsoft, phishing, risk, software

Viele IT- und Sicherheitsverantwortliche denken beim Thema E-Mail-Sicherheit vor allem an Phishing und ähnliche Gefahren in Verbindung mit dem Diebstahl von Zugangsdaten durch Cyberkriminelle. Aber zunehmend rücken auch bislang weniger beachtete Funktionen von E-Mail-Software wie Outlook in den Fokus der Diskussion: E-Mail-Regeln, Formulare und Mailfluss-Konnektoren können manipuliert werden und bergen ein ernstzunehmendes Risiko für Unternehmen,…
Key findings from “The State of Embedded Software Quality and Safety 2025” report

Aug 26, 2025 4:54 PM

Tags: ai, programming, sbom, software

Discover key trends and challenges in embedded software development, from AI integration to SBOM compliance. Learn how Black Duck’s solutions can help ensure quality and safety. The post Key findings from “The State of Embedded Software Quality and Safety 2025” report appeared first on Blog. First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/08/key-findings-from-the-state-of-embedded-software-quality-and-safety-2025-report/
Key findings from “The State of Embedded Software Quality and Safety 2025” report

Aug 26, 2025 4:54 PM

Tags: ai, programming, sbom, software

Discover key trends and challenges in embedded software development, from AI integration to SBOM compliance. Learn how Black Duck’s solutions can help ensure quality and safety. The post Key findings from “The State of Embedded Software Quality and Safety 2025” report appeared first on Blog. First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/08/key-findings-from-the-state-of-embedded-software-quality-and-safety-2025-report/
NIS2 und der Mittelstand: Zwischen Pflicht und Praxis

Aug 26, 2025 4:54 PM

Tags: ai, ceo, compliance, cybersecurity, cyersecurity, dora, fortinet, germany, governance, healthcare, international, network, nis-2, resilience, risk, risk-analysis, risk-management, service, software, strategy, supply-chain, zero-trust

Neue EU-Vorgaben wie DORA und NIS2 setzen Unternehmen unter Zugzwang bieten aber gleichzeitig die Chance, IT-Sicherheit strategisch neu zu denken.Wem das noch nicht Grund genug ist, sich mit der Resilienz und IT-Sicherheit des eigenen Unternehmens zu befassen, hat aus Richtung der Europäischen Union in den letzten Monaten noch einmal etwas Zusatzmotivation erhalten. Während von dem…
Hochentwickelte Phishing-Kampagne ‘ZipLine” zielt auf Fertigungs- und Lieferkettenindustrie ab

Aug 26, 2025 4:54 PM

Tags: mail, phishing, social-engineering, software

Check Point Research, die Sicherheitsforscher von Check Point Software Technologies warnt vor ‘ZipLine”, eine der fortschrittlichsten Social-Engineering-Phishing-Kampagnen der vergangenen Jahre. Die Attacken zielen präzise auf Unternehmen der US-amerikanischen und kombinieren neuartige Angriffsmethoden mit hohem Schadenspotenzial. Zipline: Umgedrehter Phishing-Ansatz Anstatt klassische Phishing-E-Mails zu versenden, wenden die Angreifer eine ungewöhnliche Vorgehensweise an: Sie nehmen über die öffentlichen…
NIS2 und der Mittelstand: Zwischen Pflicht und Praxis

Aug 26, 2025 4:54 PM

Tags: ai, ceo, compliance, cybersecurity, cyersecurity, dora, fortinet, germany, governance, healthcare, international, network, nis-2, resilience, risk, risk-analysis, risk-management, service, software, strategy, supply-chain, zero-trust

Neue EU-Vorgaben wie DORA und NIS2 setzen Unternehmen unter Zugzwang bieten aber gleichzeitig die Chance, IT-Sicherheit strategisch neu zu denken.Wem das noch nicht Grund genug ist, sich mit der Resilienz und IT-Sicherheit des eigenen Unternehmens zu befassen, hat aus Richtung der Europäischen Union in den letzten Monaten noch einmal etwas Zusatzmotivation erhalten. Während von dem…
Hochentwickelte Phishing-Kampagne ‘ZipLine” zielt auf Fertigungs- und Lieferkettenindustrie ab

Aug 26, 2025 4:54 PM

Tags: mail, phishing, social-engineering, software

Check Point Research, die Sicherheitsforscher von Check Point Software Technologies warnt vor ‘ZipLine”, eine der fortschrittlichsten Social-Engineering-Phishing-Kampagnen der vergangenen Jahre. Die Attacken zielen präzise auf Unternehmen der US-amerikanischen und kombinieren neuartige Angriffsmethoden mit hohem Schadenspotenzial. Zipline: Umgedrehter Phishing-Ansatz Anstatt klassische Phishing-E-Mails zu versenden, wenden die Angreifer eine ungewöhnliche Vorgehensweise an: Sie nehmen über die öffentlichen…
Google to Verify All Android Developers in 4 Countries to Block Malicious Apps

Aug 26, 2025 9:54 AM

Tags: android, google, identity, malicious, software

Google has announced plans to begin verifying the identity of all developers who distribute apps on Android, even for those who distribute their software outside the Play Store.”Android will require all apps to be registered by verified developers in order to be installed by users on certified Android devices,” the company said. “This creates crucial…
Protecting farms from hackers: A QA with John Deere’s Deputy CISO

Aug 26, 2025 8:54 AM

Tags: ciso, cybersecurity, hacker, Hardware, software

Agriculture is a connected, software-driven industry where cybersecurity is just as essential as tractors and harvesters. From embedded hardware in smart fleets to defending … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/26/carl-kubalsky-john-deere-smart-agriculture-cybersecurity/
Protecting farms from hackers: A QA with John Deere’s Deputy CISO

Aug 26, 2025 8:54 AM

Tags: ciso, cybersecurity, hacker, Hardware, software

Agriculture is a connected, software-driven industry where cybersecurity is just as essential as tractors and harvesters. From embedded hardware in smart fleets to defending … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/26/carl-kubalsky-john-deere-smart-agriculture-cybersecurity/
2025 CSO Hall of Fame: Meg Anderson on AI, strategic security investments, and life after InfoSec

Aug 25, 2025 6:54 PM

Tags: ai, automation, business, ciso, conference, cyber, cybersecurity, finance, infosec, jobs, metric, phishing, programming, risk, risk-management, software, strategy, technology, threat, tool

Which technologies are you most cautious about from a CISO’s point of view, and why?: Meg Anderson: I’m cautious of “solutions” that don’t solve a strategic problem. CISOs only have so much budget and mindshare. You need to understand where a tool fits in your investment and strategic roadmap. There were times when my team…
Data I/O reports business disruptions in wake of ransomware attack

Aug 25, 2025 6:54 PM

Tags: attack, business, data, ransomware, software

The electronics manufacturer and software vendor serves major automotive suppliers and top tech firms. First seen on cyberscoop.com Jump to article: cyberscoop.com/dataio-ransomware-attack/
Data I/O reports business disruptions in wake of ransomware attack

Aug 25, 2025 6:54 PM

Tags: attack, business, data, ransomware, software

The electronics manufacturer and software vendor serves major automotive suppliers and top tech firms. First seen on cyberscoop.com Jump to article: cyberscoop.com/dataio-ransomware-attack/
Phishing über Google-Classroom mit 115000 E-Mails an 13500 Organisationen

Aug 25, 2025 4:54 PM

Tags: google, mail, phishing, software

Check Point Software Technologies hat eine groß angelegte Phishing-Kampagne aufgedeckt, die Google-Classroom missbraucht und noch aktiv ist. Millionen von Lehrern und Schülern weltweit nutzen die Plattform zur Bereitstellung von Leistungsnachweisen, Schulaufgaben und Lehrmaterial. Innerhalb von nur einer Woche starteten die Angreifer fünf koordinierte Wellen und versendeten mehr als 115 000 Phishing-E-Mails an 13 500 Organisationen…