Tag: software
-
Peter Thiel: Bundesjustizministerin geht auf Distanz zu Palantir-Software
Tags: softwareEs könnten nur solche Mittel genutzt werden, die mit rechtsstaatlichen Grundsätzen vereinbar seien, sagte Stefanie Hubig über den Einsatz der Analyse-Software. First seen on golem.de Jump to article: www.golem.de/news/peter-thiel-bundesjustizministerin-geht-auf-distanz-zu-palantir-software-2508-198746.html
-
The 7 Best Encryption Software Choices in 2025
This is a comprehensive list of the best encryption software and tools, covering their features, pricing and more. Use this guide to determine your best fit. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/encryption-software/
-
Microsoft Blames ‘China-Based Threat Actor’ for SharePoint Attacks
A series of cyberattacks targeting Microsoft collaboration software, specifically SharePoint, have been linked to Chinese hackers and threat actors. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-sharepoint-patch-failure-chinese-hackers/
-
New Undetectable Plague Malware Targeting Linux Servers for Persistent SSH Access
Security researchers have discovered a sophisticated Linux backdoor dubbed >>Plague
-
Malicious AI-generated npm package hits Solana users
AI-generated npm package @kodane/patch-manager drained Solana wallets; 1,500+ downloads before takedown on July 28, 2025. AI-generated npm package @kodane/patch-manager was flagged for hiding malicious software to drain Solana wallets. The package was uploaded on July 28, 2025, and it was downloaded more than 1,500 times before takedown. >>The package @kodane/patch-manager, is a sophisticated cryptocurrency wallet…
-
Genomics Gear Firm Pays $9.8M to Settle False Cyber Claims
US Alleged Illumina ‘Knowingly’ Sold Feds Systems Containing Vulnerabilities. Genomics sequencing firm Illumina Inc. has agreed to pay $9.8 million to resolve False Claims Act whistleblower allegations that it sold software and systems containing cybersecurity vulnerabilities over more than seven years to government agencies. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/genomics-gear-firm-pays-98m-to-settle-false-cyber-claims-a-29108
-
Why Custom Database Software Matters in 2025
Learn why building your own database software boosts efficiency, performance, and security for business success in 2025. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/why-custom-database-software-matters-in-2025/
-
Lazarus Hackers Weaponize 234 npm and PyPI Packages to Infect Developers
Sonatype’s automated detection systems have uncovered an expansive and ongoing infiltration of the global open-source ecosystem by the notorious Lazarus Group, a threat actor believed to be backed by North Korea’s Reconnaissance General Bureau. Between January and July 2025, Sonatype identified and blocked 234 malicious software packages deployed through both the npm and PyPI open-source…
-
Why I joined Tonic.ai: A software engineer’s perspective
Tags: softwareStaff Software Engineer Johnny Goodnow shares his thoughts on the problem Tonic is tackling, the engineering challenges it entails, and the team taking it on”, and how these three key ingredients translate into energizing, impactful work. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/why-i-joined-tonic-ai-a-software-engineers-perspective/
-
DOJ reaches $9.8 million settlement with Illumina over cyber whistleblower claims
The U.S. alleged the company knowingly sold genetic-sequencing systems with software vulnerabilities to federal agencies. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cyber-fraud-settlement-genomic-testing-company/756559/
-
Ransomware-Report Erpressungsversuche werden gezielter und Verhandlungen über Lösegeld aggressiver
Check Point Research (CPR), die Sicherheitsforschungsabteilung von Check Point Software Technologies, hat seinen Ransomware-Report für das zweite Quartal 2025 veröffentlicht. Höhepunkte des Berichts umfassen: Große Ransomware-as-a-Service-Gruppen (RaaS) brachen zusammen, wie Lockbit und Ransomhub, was zu einer Fragmentierung des kriminellen Ökosystems geführt hat, das aber nach wie vor sehr aktiv ist. Die Gruppierung um die Ransomware…
-
Wie EDR EDR aushebelt
Tags: access, cisco, crowdstrike, cyberattack, detection, edr, endpoint, firewall, monitoring, software, tool, vulnerabilityLegitime Security-Tools gegeneinander auszuspielen, eröffnet Cyberkriminellen diverse Vorteile.Cybersicherheitsforscher haben einen unheilvollen neuen Angriffsvektor entdeckt. Dabei könnten Angreifer kostenlose Testversionen von Endpoint Detection and Response (EDR)-Software dazu missbrauchen, vorhandene Sicherheits-Tools zu deaktivieren. Die Researcher Ezra Woods und Mike Manrod haben das Phänomen entdeckt und dokumentiert, das sie als “EDR-on-EDR Violence” bezeichnen. Ihre Erkenntnisse haben die Sicherheitsexperten…
-
Kostenlose Datenrettung für Linux-Dateisysteme – R-Linux: freie Linux-Recovery-Software
First seen on security-insider.de Jump to article: www.security-insider.de/r-linux-freie-linux-recovery-software-a-cd561c62a9bec6839b06eb465bd0bfe2/
-
Microsoft-Sicherheitslücke in Deutschland weit verbreitet
Tags: bug, china, cyberattack, cybersecurity, germany, infrastructure, microsoft, ransomware, risk, software, update, usa, vulnerabilityDie Gefahr ist noch nicht gebannt: Experten verzeichnen weiter steigende Infektionszahlen.Deutsche Unternehmen, Behörden und Bildungseinrichtungen sind in Europa am stärksten von der schwerwiegenden Schwachstelle in der Sharepoint-Software von Microsoft betroffen. Nach einer Analyse des europäischen Cybersecurity-Unternehmens Eye Security wurden bislang weltweit 396 infizierte Server in 145 Organisationen identifiziert 42 davon betreffen demnach Unternehmen, die in…
-
Hackers Abuse EDR Free Trials to Bypass Endpoint Protection
Cybersecurity researchers have uncovered a concerning new attack vector where threat actors are exploiting free trials of endpoint detection and response (EDR) software to disable existing security protections on targeted systems. This technique, dubbed >>BYOEDR
-
SentinelLabs uncovers China’s hidden cyber-espionage arsenal
CSOonline that the most important pieces of new information gleaned from the findings are that “China’s contracting ecosystem forces many companies and individuals to collaborate on intrusions. This means many China-based Advanced Persistent Threats (APTs) may actually contain many different companies with many different clients.”The nation’s diverse private sector offensive ecosystem, he said, “supports a…
-
Attackers wrap phishing links through URL scanning services to bypass detection
urldefense.proofpoint.com and url.emailprotection.link (Intermedia).”Link wrapping is designed by vendors like Proofpoint to protect users by routing all clicked URLs through a scanning service, allowing them to block known malicious destinations at the moment of click,” Cloudflare researchers wrote in their report on the attacks. “While this is effective against known threats, attacks can still succeed…
-
Vergleich Microsoft Defender for Office 365 zu ICES-Software von Drittanbietern
Wie schlägt sich der Microsoft Defender eigentlich im Vergleich zu ICES-Lösungen von Drittanbietern zum Schutz von Microsoft Office 365? Die ICES-Lösungen können ja in Microsoft Defender for Office 365 integriert werden. Die Tage ist mir eine Übersicht Microsoft mit einem … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/01/vergleich-microsoft-defender-zu-ices-software-von-drittanbietern/
-
North Korean hackers target open-source repositories in new espionage campaign
In its latest operation, Lazarus took advantage of major gaps in the open-source software supply chain, like developers depending on unvetted packages and the lack of oversight for popular tools that are often maintained by just one or two people. First seen on therecord.media Jump to article: therecord.media/north-korean-hackers-targeting-open-source-repositories
-
Ransomware up 179%, credential theft up 800%: 2025’s cyber onslaught intensifies
Exploits multiply as defenders play catch-up: Vulnerability disclosure rose by 246%, and publicly available exploits increased by 179%, with over 20000 vulnerabilities disclosed in the first half of 202535% of which already have exploit code.A backlog of 42000 vulnerabilities awaiting NVD analysis and delays in CVE enrichment leave organizations blind to many critical flaws, the…
-
Palo Alto Networks: Cyberark für 25 Milliarden US-Dollar verkauft
Cyberark Software ist verkauft. Es ist die größte Übernahme eines israelischen Unternehmens nach Googles Kauf von Wiz für 32 Milliarden US-Dollar Anfang des Jahres. First seen on golem.de Jump to article: www.golem.de/news/palo-alto-networks-cyberark-fuer-25-milliarden-us-dollar-verkauft-2507-198691.html
-
CCC und GFF: Verfassungsbeschwerde gegen Einsatz von Palantir-Software
Die bayerische Polizei ist begeistert von der Palantir-Software. Doch Bürgerrechtlern und Hackern geht der Einsatz zu weit. First seen on golem.de Jump to article: www.golem.de/news/ccc-und-gff-verfassungsbeschwerde-gegen-polizeisoftware-von-palantir-2507-198418.html
-
New AI model offers faster, greener way for vulnerability detection
A team of researchers has developed a new AI model, called White-Basilisk, that detects software vulnerabilities more efficiently than much larger systems. The model’s release … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/31/white-basilisk-ai-vulnerability-detection/
-
Securing the Next Era: Why Agentic AI Demands a New Approach to API Security
I’ve spent my career building solutions to protect the API fabric that powers modern businesses. I founded Salt because I saw that traditional security tools such as WAFs, gateways, and CDNs weren’t designed to see or secure APIs. That gap led to breaches, blind spots, and billions in risk. Today, we’re facing a new wave…
-
Hackers target Python devs in phishing attacks using fake PyPI site
The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-target-python-devs-in-phishing-attacks-using-fake-pypi-site/
-
Applying Tenable’s Risk-based Vulnerability Management to the Australian Cyber Security Centre’s Essential Eight
Tags: ai, attack, breach, business, cloud, compliance, container, control, cvss, cyber, cybersecurity, data, data-breach, defense, endpoint, finance, firewall, framework, google, government, identity, incident response, infrastructure, intelligence, Internet, microsoft, mitigation, network, ransomware, risk, service, software, strategy, technology, threat, tool, update, vpn, vulnerability, vulnerability-management, windows, zero-dayLearn how Thales Cyber Services uses Tenable to help customers navigate the maturity levels of the Essential Eight, enabling vulnerability management and staying ahead of cyber threats. In today’s fast-moving digital world, cyber threats are more advanced and relentless than ever. A single security breach can mean financial loss, reputational damage and operational chaos. That’s…