Tag: software
-
BrandRanking aus dem vierten Quartal 2024
Check Point Research (CPR), die Threat-Intelligence-Abteilung von Check Point Software Technologies, hat sein aktuelles Brand-Phishing-Ranking für Q4 2024 veröffentlicht. Der Bericht hebt die Marken hervor, die von Cyberkriminellen am häufigsten nachgeahmt werden, um persönliche Informationen und Zahlungsdaten zu stehlen, und unterstreicht die anhaltende Bedrohung durch Phishing-Angriffe. Im vierten Quartal blieb Microsoft mit 32 Prozent die…
-
Cisco patches antivirus decommissioning bug as exploit code surfaces
Cisco has patched a denial-of-service (DoS) vulnerability affecting its open-source antivirus software toolkit, ClamAV, which already has a proof-of-concept (PoC) exploit code available to the public.Identified as CVE-2025-20128, the vulnerability stems from a heap-based buffer overflow in the Object Linking and Embedding 2 (OLE2) decryption routine, enabling unauthenticated remote attackers to cause a DoS condition…
-
10 top XDR tools and how to evaluate them
Tags: ai, attack, automation, business, cloud, computing, container, corporate, credentials, data, defense, detection, edr, email, encryption, endpoint, finance, firewall, google, guide, Hardware, iam, ibm, identity, incident response, infrastructure, intelligence, malicious, malware, marketplace, microsoft, mitigation, network, office, okta, open-source, organized, risk, security-incident, service, siem, skills, soar, software, spam, technology, threat, tool, training, vulnerability, zero-dayLittle in the modern IT world lends itself to manual or siloed management, and this is doubly true in the security realm. The scale of modern enterprise computing and modern application stack architecture requires security tools that can bring visibility into the security posture of modern IT components and integrate tightly to bring real-time threat…
-
Open-Source ClamAV Releases Security Update for Buffer Overflow Vulnerability Patch Now
ClamAV, a widely used open-source antivirus software, has released security patch updates to address a critical buffer overflow vulnerability (CVE-2025-20128). The vulnerability, identified in the OLE2 file parser, posed a potential risk of denial-of-service (DoS) attacks. Users are urged to update immediately to the newly-released ClamAV versions 1.4.2 and 1.0.8 to safeguard their systems. Details…
-
Python administrator moves to improve software security
The administrators of the Python Package Index (PyPI) have begun an effort to improve the hundreds of thousands of software packages that are listed. The attempt, which began earlier last year, is to identify and stop malware-laced packages from proliferating across the open-source community that contributes and consumes Python software. As previously reported, hijacking Python…
-
Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)
Cisco has released software updates to address a critical security flaw impacting Meeting Management that could permit a remote, authenticated attacker to gain administrator privileges on susceptible instances.The vulnerability, tracked as CVE-2025-20156, carries a CVSS score of 9.9 out 10.0. It has been described as a privilege escalation flaw in the REST API of Cisco…
-
ValleyRAT malware spread via bogus software installers
First seen on scworld.com Jump to article: www.scworld.com/brief/valleyrat-malware-spread-via-bogus-software-installers
-
Fraud Watch: E-Skimmers and Scam E-Commerce Sites Still Bite
Criminals Listed 269 Million Stolen Payment Card For Sale in 2024, Researchers Find. It’s an old story: Criminals rake in profits by using digital e-skimming software, running scam e-commerce sites and selling stolen payment card data. Unfortunately, it’s made continually new thanks to adaptability of cybercriminals, who keep their tool set relevant and ever more…
-
PowerSchool data breach brings claims of negligence, poor cyber hygiene
The K-12 software company is facing legal pushback and criticism following a cyberattack that impacted a still unknown number of districts. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/powerschool-data-breach-lawsuits-negligence/737961/
-
PlushDaemon APT Targeted South Korean VPN Software
PlushDaemon APT hacked South Korean VPN software with SlowStepper backdoor as part of a 2023 espionage campaign First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/plushdaemon-apt-targeted-south/
-
Use this AI chatbot prompt to create a password-exclusion list
Creating a custom password-exclusion list can help prevent employees from using passwords that are likely to be guessed. Learn from Specops Software on using AI to generate password dictionary for securing your organization’s credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/use-this-ai-chatbot-prompt-to-create-a-password-exclusion-list/
-
A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature
A vulnerability in the 7-Zip file software allows attackers to bypass the Mark of the Web (MotW) Windows security feature. Attackers can exploit a vulnerability, tracked as CVE-2025-0411, in the free, open-source file archiver software 7-Zip to bypass the Mark of the Web (MotW) Windows security feature. Mark of the Web (MotW) is a security…
-
Cyberattack Hits PowerSchool, Exposing Personal Data of Students and Staff
PowerSchool, a leading provider of cloud-based software used by schools to manage student information, experienced a cybersecurity incident. The PowerSchool cyberattack, which occurred between December 22 and December 28, 2024, affected several school districts across North America. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/powerschool-cyberattack-detail/
-
Weaponized VS Code Impersonate Zoom App Steals Cookies From Chrome
A newly identified extension for Visual Studio Code (VS Code) has been found to impersonate a legitimate Zoom application, enabling cybercriminals to steal sensitive cookies from Google Chrome. This incident marks a significant escalation in the tactics employed by malicious actors to exploit trusted software ecosystems. The Discovery The nefarious extension, uploaded to the VS…
-
Wiztree Software-Installation bei Praxis-Verwaltungssystem?
Tags: softwareIch nutze den Blog mal als Honeypot, um herauszufinden, ob es weitere Betroffene gibt. Ein Blog-Leser hat mich vor einiger Zeit kontaktiert, weil bei einem seiner Kunden eine Software mit Namen “Wiztree” auf dessen Servern installiert wurde. Da es sich … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/01/22/wiztree-software-installation-bei-praxis-verwaltungssystem/
-
Three Keys to Modernizing Data Security: DSPM, AI, and Encryption
Tags: access, ai, automation, best-practice, business, cloud, compliance, container, control, cyber, cybercrime, data, data-breach, detection, encryption, GDPR, incident response, infrastructure, privacy, regulation, risk, saas, security-incident, skills, software, strategy, threat, tool, vulnerabilityThree Keys to Modernizing Data Security: DSPM, AI, and Encryption andrew.gertz@t“¦ Tue, 01/21/2025 – 14:56 Organizations worldwide face a “perfect storm” of increasing and ever-evolving cyber threats. Internal and external factors are at play, elevating cyber risks and their consequences and mandating new approaches to safeguard data. A recent study based on responses from over…
-
Disciplinary and special ed records of Toronto students may have leaked in PowerSchool breach
The data breach at the educational software company may affect millions of students at Toronto public schools, one of thousands of districts using PowerSchool tools. ]]> First seen on therecord.media Jump to article: therecord.media/disciplinary-special-records-toronto-powerschool
-
Attackers Can Evade 2FA with Yubico Software Module Bug
First seen on scworld.com Jump to article: www.scworld.com/brief/attackers-can-evade-2fa-with-yubico-software-module-bug
-
CISA, FBI Issue Updated Federal Security Guidance for Software Vendors
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-fbi-issue-updated-federal-security-guidance-for-software-vendors
-
Evading 2FA possible with Yubico software module bug
First seen on scworld.com Jump to article: www.scworld.com/brief/evading-2fa-possible-with-yubico-software-module-bug
-
Updated federal security guidance for software vendors issued
Tags: softwareFirst seen on scworld.com Jump to article: www.scworld.com/brief/updated-federal-security-guidance-for-software-vendors-issued
-
Neue Malware-Machtverteilung in Deutschland
Check Point Software Technologies hat seinen Global-Threat-Index für Dezember 2024 veröffentlicht, in dem die jüngsten Aktivitäten von Cyberkriminellen hervorgehoben werden. In diesem Monat machte Funksec auf sich aufmerksam, ein aufstrebender Ransomware-as-a-Service (RaaS)-Betreiber, der künstliche Intelligenz für seine Machenschaften nutzt. In Deutschland spielte der im November noch mit einem Anteil von 18,5 Prozent an allen Malware-Infektionen…
-
ChatGPT API flaws could allow DDoS, prompt injection attacks
OpenAI-owned ChatGPT might have a vulnerability that could allow threat actors to launch distributed denial of service (DDoS) attacks on unsuspecting targets. According to a discovery made by German security researcher Benjamin Flesch, the ChatGPT crawler, which OpenAI uses to collect data from the internet to improve ChatGPT, can be tricked into DDoSing arbitrary websites. “ChatGPT crawler…