Tag: software
-
Russian hospital faces multi-day shutdown as pro-Ukraine group claims cyberattack
Authorities in the republic of Chuvashia confirmed attackers targeted software used to manage patient records and medical histories. First seen on therecord.media Jump to article: therecord.media/russia-hospital-shutdown-lecardo
-
Russian hospital faces multi-day shutdown as pro-Ukraine group claims cyberattack
Authorities in the republic of Chuvashia confirmed attackers targeted software used to manage patient records and medical histories. First seen on therecord.media Jump to article: therecord.media/russia-hospital-shutdown-lecardo
-
FTC wants a new, segregated software system to police deepfake porn
The Republican chair told Congress that the agency will need specialized software, personnel and expertise to enforce the newly passed Take It Down Act. First seen on cyberscoop.com Jump to article: cyberscoop.com/ftc-take-it-down-act-deepfake-data-software-congress/
-
ChatGPT rolls out Codex, an AI tool for software programming
OpenAI is rolling out ‘Codex’ for ChatGPT, which is an AI agent that automates and delegates programming tasks for software engineers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-rolls-out-codex-an-ai-tool-for-software-programming/
-
Printer maker Procolored offered malware-laced drivers for months
For at least half a year, the official software supplied with Procolored printers included malware in the form of a remote access trojan and a cryptocurrency stealer. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/printer-maker-procolored-offered-malware-laced-drivers-for-months/
-
Printer Company Distributes Malicious Drivers Infected with XRed Malware
Procolored, a printer manufacturing company, has been found distributing software drivers infected with malicious code, including the notorious XRed backdoor malware. The issue came to light when Cameron Coward, a YouTuber behind the channel Serial Hobbyism, attempted to review a $6,000 UV printer and encountered antivirus alerts upon plugging in a USB drive containing the…
-
Digitalminister Wildberger: Ich habe auch mal Software entwickelt
In seiner ersten Bundestagsrede stellt sich Digitalminister Wildberger als Praktiker dar. Zentrale Projekte sind ein Deutschland-Stack und die Bürger-ID. First seen on golem.de Jump to article: www.golem.de/news/digitalminister-wildberger-ich-habe-auch-mal-software-entwickelt-2505-196273.html
-
Scattered-Spider mischt den britischen Einzelhandel auf
Check Point Software Technologies analysiert die Hacker-Gruppe Scattered-Spider, die als Teil des Dragonforce-Ransomware-Kartells agiert, das sich zu einer Reihe von Angriffen auf britische Einzelhandelsunternehmen im April und Mai 2025 bekannt hat. Während Dragonforce sich für Erpressung und Datenabfluss verantwortlich erklärte, deuten immer mehr Hinweise darauf hin, dass auch Scattered-Spider eine grundlegende Rolle bei der Durchführung…
-
Are You Using the Right SSPM Software? – Grip Security
Not all SSPM tools and SSPM software technology are created equal. Learn what an SSPM should do, and how to choose a solution that keeps up with your SaaS use. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/are-you-using-the-right-sspm-software-grip-security/
-
Proofpoint buying Hornetsecurity in a play to expand email security scope
One of many big purchases in the industry: While the terms are confidential, sources have reported the price of the Hornetsecurity purchase, which is expected to close in the second half of 2025, to be well over $1 billion. This would make it Proofpoint’s largest acquisition, and also one of the biggest cybersecurity deals in…
-
FTC wants a new, segregated software system to police deepfake porn
The Republican chair told Congress that the agency will need specialized software, personnel and expertise to enforce the newly passed Take It Down Act. First seen on cyberscoop.com Jump to article: cyberscoop.com/ftc-take-it-down-act-deepfake-data-software-congress/
-
Microsoft needs to get serious about secure software, or we’ll find a new IT partner
First seen on scworld.com Jump to article: www.scworld.com/perspective/microsoft-needs-to-get-serious-about-secure-software-or-well-find-a-new-it-partner
-
SAP cyberattack widens, drawing Salt Typhoon and Volt Typhoon comparisons
Multiple firms are tracking the zero-day attacks on Europe’s top software firm. First seen on cyberscoop.com Jump to article: cyberscoop.com/sap-cyberattack-widens-drawing-salt-typhoon-and-volt-typhoon-comparisons/
-
Threat Actors Exploit Open Source Packages to Deploy Malware in Supply Chain Attacks
The Socket Threat Research Team has uncovered a surge in supply chain attacks where threat actors weaponize open source software libraries to deliver malicious payloads such as infostealers, remote shells, and cryptocurrency drainers. With modern development heavily reliant on ecosystems like npm, PyPI, Go Module, Maven Central, and RubyGems where 7090% of codebases consist of…
-
Pen Testing for Compliance Only? It’s Time to Change Your Approach
Imagine this: Your organization completed its annual penetration test in January, earning high marks for security compliance. In February, your development team deployed a routine software update. By April, attackers had already exploited a vulnerability introduced in that February update, gaining access to customer data weeks before being finally detected.This situation isn’t theoretical: it First…
-
Hacker nehmen Rüstungslieferanten der Ukraine ins Visier
Tags: 2fa, access, authentication, bug, cyberattack, exploit, hacker, mail, mfa, password, software, strategy, ukraine, vulnerabilityRussische Hacker greifen gezielt Rüstungsfirmen an, die die Ukraine mit Waffen versorgen.Die berüchtigte russische Hackergruppe Fancy Bear hat gezielt Rüstungsfirmen angegriffen, die Waffen an die Ukraine liefern. Das geht aus einer aktuellen Studie des slowakischen Sicherheitsunternehmens Eset aus Bratislava hervor. Danach richteten sich die Angriffe vor allem gegen Hersteller sowjetischer Waffentechnik in Bulgarien, Rumänien und…
-
Ivanti Fixes RCE and Auth Bypass Vulnerabilities in Endpoint Manager Mobile
Tags: cve, endpoint, exploit, ivanti, mobile, rce, remote-code-execution, risk, software, vulnerabilityIvanti has released security patches to address two vulnerabilities in its Endpoint Manager Mobile (EPMM) software, which were being actively exploited in limited attacks. These vulnerabilities, identified as CVE-2025-4427 and CVE-2025-4428, have the potential to allow attackers to execute remote code on vulnerable systems, posing a severe risk to organizations using the software. First seen…
-
Secure Code Development News to Celebrate
Fewer Applications Carry OWASP Top 10 Flaws. Here’s secure code development news to celebrate. After five years of steady improvement, slightly more than half of software applications don’t have an OWASP Top 10 security flaw, find researchers Chris Wysopal and Jason Healey. That makes life harder for attackers, Wysopal said. First seen on govinfosecurity.com Jump…
-
Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit
Samsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild.The vulnerability, tracked as CVE-2025-4632 (CVSS score: 9.8), has been described as a path traversal flaw.”Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052…
-
Severe Adobe Illustrator Flaw Allows Remote Code Execution
Adobe has issued an urgent security update for its widely used graphic design software, Adobe Illustrator, following the discovery of a critical heap-based buffer overflow vulnerability tracked as CVE-2025-30330. This flaw, which allows arbitrary code execution on affected systems, impacts both Windows and macOS versions of Illustrator 2024 and 2025. Rated with a CVSS score…
-
Russian military cadet reportedly arrested for selling hacking tool to FSB agent
A Russian military cadet reportedly developed an algorithm that could bypass the protective infrastructure of law enforcement software and gain access to restricted data. First seen on therecord.media Jump to article: therecord.media/russian-military-cadet-reportedly-arrested-for-selling-hacking-tool
-
Neue EU-Schwachstellen-Datenbank geht an den Start
Tags: bug, cve, cvss, cybersecurity, cyersecurity, governance, government, infrastructure, mitre, nis-2, risk, sap, software, technology, tool, vulnerabilityDie neue EU-Schwachstellen-Datenbank EUVD soll das CVE-Programm ergänzen.Seit dieser Woche verfügt die Technologiebranche über eine neue Datenbank, um die neuesten Sicherheitslücken in Software zu überprüfen: die European Union Vulnerability Database (EUVD). Das Programm wurde von der Europäischen Agentur für Cybersicherheit (ENISA) zur Umsetzung der EU-Cybersicherheitsrichtlinie NIS2 eingerichtet.Hier stellt sich die Frage: Warum braucht es ein…
-
Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE Campaigns
Tags: cyber, espionage, group, healthcare, korea, military, service, software, supply-chain, technologyA cyber espionage group known as Earth Ammit has been linked to two related but distinct campaigns from 2023 to 2024 targeting various entities in Taiwan and South Korea, including military, satellite, heavy industry, media, technology, software services, and healthcare sectors.Cybersecurity firm Trend Micro said the first wave, codenamed VENOM, mainly targeted software service providers,…
-
Weaponized PyPI Package Targets Developers to Steal Source Code
Security researchers at RL have discovered a malicious Python package called >>solana-token
-
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server
Microsoft on Tuesday shipped fixes to address a total of 78 security flaws across its software lineup, including a set of five zero-days that have come under active exploitation in the wild.Of the 78 flaws resolved by the tech giant, 11 are rated Critical, 66 are rated Important, and one is rated Low in severity.…
-
Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited Attacks
Tags: access, attack, authentication, credentials, cve, endpoint, exploit, flaw, ivanti, mobile, remote-code-execution, software, update, vulnerabilityIvanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote code execution.The vulnerabilities in question are listed below -CVE-2025-4427 (CVSS score: 5.3) – An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials…
-
CVE-2025-4427, CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Remote Code Execution
Tags: access, advisory, api, attack, authentication, cve, endpoint, exploit, flaw, ivanti, mobile, open-source, programming, rce, remote-code-execution, software, vulnerability, waf, zero-dayRemote code execution vulnerability in a popular mobile device management solution from Ivanti has been exploited in the wild in limited attacks Background On May 13, Ivanti released a security advisory to address a high severity remote code execution (RCE) and a medium severity authentication bypass vulnerability in its Endpoint Manager Mobile (EPMM) product, a…
-
Researchers bypass Intel’s Spectre fixes, six years of CPUs at risk
Mitigations: There are two ways to deploy CPU microcode updates. One is through UEFI during early boot stages, where the CPU will load the latest microcode version stored in the UEFI, or by the operating system bootloader later in the booting process, though this is a temporary patch that needs to be constantly reapplied.For Spectre…