Tag: software
-
Transfer-Software von Cleo: Hinter Firewall bringen, Patch wirkungslos
Die Datenstransfer-Software von Cleo hatte eine Sicherheitslücke gestopft jedoch unzureichend. Das Leck wird aktiv angegriffen. First seen on heise.de Jump to article: www.heise.de/news/Transfer-Software-von-Cleo-Hinter-Firewall-bringen-Patch-wirkungslos-10193961.html
-
Hackers are exploiting a flaw in popular file-transfer tools to launch mass hacks, again
Threat actors are exploiting a high-risk bug in Cleo software – and Huntress warns that fully-patched systems are vulnerable First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/10/hackers-are-exploiting-a-flaw-in-popular-file-transfer-tools-to-launch-mass-hacks-again/
-
Attackers exploit vulnerability in Cleo file transfer software
Cleo disclosed and patched the remote code execution vulnerability in late October, but managed file transfer products have proved to be popular targets for threat actors. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366616981/Attackers-exploit-vulnerability-in-Cleo-file-transfer-software
-
EDR-Software ein Kaufratgeber
Tags: ai, android, api, backup, browser, chrome, cloud, computing, crowdstrike, cyberattack, detection, edr, endpoint, firewall, identity, incident response, intelligence, iot, kubernetes, linux, macOS, mail, malware, microsoft, network, ransomware, risk, siem, soar, software, sophos, threat, tool, windows, zero-day -
Ongoing RedLine stealer campaign facilitated by cracked corporate software
First seen on scworld.com Jump to article: www.scworld.com/brief/ongoing-redline-stealer-campaign-facilitated-by-cracked-corporate-software
-
Winner’s Spotlight: Security Serious Unsung Heroes Awards 2024 Godmother of Security
This year’s Security Serious Unsung Heroes Awards uncovered and celebrated the individuals and teams that go above and beyond to make the UK a safer place to do business, as well as share and spread their expertise far and wide. The sponsors included KnowBe4, Check Point Software, ThinkCyber, The Zensory, Hornetsecurity and Pulse Conferences. Jessica…
-
XDR-Erweiterung von Bitdefender zum Schutz von Daten in Atlassian-Cloud-Applikationen
Bitdefender hat einen neuen Business-Applications-Sensor für seine Gravityzone-XDR-Plattform zur Cybersicherheit vorgestellt. Der Sensor schützt Unternehmensdaten, die in cloudbasierten Produktivitäts- und Kooperationsapplikationen gehostet und gespeichert sind. Er wird zunächst Atlassian-Cloud-Anwendungen wie Confluence, Jira und Bitbucket unterstützen und soll später weitere gängige Software-as-a-Service (SaaS)-Plattformen für Geschäftsabläufe beobachten. Der Business-Applications-Sensor erweitert die native XDR-Plattform von Bitdefender-Gravityzone-XDR. Gravityzone-XDR verfolgt…
-
âš¡ THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2 – 8)
This week’s cyber world is like a big spy movie. Hackers are breaking into other hackers’ setups, sneaky malware is hiding in popular software, and AI-powered scams are tricking even the smartest of us. On the other side, the good guys are busting secret online markets and kicking out shady chat rooms, while big companies…
-
Google Announces Vanir, A Open-Source Security Patch Validation Tool
Google has officially launched Vanir, an open-source security patch validation tool designed to streamline and automate the process of ensuring software security patches are integrated effectively. The announcement was made following Vanir’s initial preview during the Android Bootcamp earlier this year in April. This powerful tool aims to bolster the security of the Android ecosystem by…
-
Blue Yonder investigating data theft claims after ransomware gang takes credit for cyberattack
Supply chain software giant Blue Yonder says it is investigating claims of data theft after a ransomware gang threatened to publish troves of data stolen from the company. Arizona-based Blue Yonder, which provides supply chain management software to thousands of organizations including DHL, Starbucks and Walgreens, was hit by a cyberattack on November 21. The…
-
Qlik Sense for Windows Vulnerability Allows Remote Code Execution
Qlik has identified critical vulnerabilities in its Qlik Sense Enterprise for Windows software that could lead to remote code execution (RCE) if exploited. Security patches have been released to mitigate these risks and ensure system integrity. The vulnerabilities, discovered during Qlik’s internal security testing, pose a significant threat to systems running Qlik Sense Enterprise for…
-
Vorfall offenbarte einen eklatanten Mangel an Vorkehrungen Ausfall: Wendepunkt für das Software-Engineering
First seen on security-insider.de Jump to article: www.security-insider.de/crowdstrike-ausfall-2024-softwareindustrie-a-3e4b346b3ad717ae1252f85a4782b3a9/
-
Compromised Software Code Poses New Systemic Risk to U.S. Critical Infrastructure
New Fortress Information Security research shows 90% of software products used by critical infrastructure organizations contain code developed in China. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/compromised-software-code-poses-systemic-risks-to-critical-infrastructure
-
Gen AI use cases rising rapidly for cybersecurity, but concerns remain
Tags: ai, attack, automation, awareness, ceo, ciso, compliance, control, cybersecurity, data, detection, finance, framework, fraud, GDPR, governance, grc, group, guide, Hardware, HIPAA, incident response, intelligence, international, malware, middle-east, monitoring, phishing, privacy, RedTeam, regulation, risk, risk-assessment, risk-management, soc, software, strategy, technology, threat, tool, training, usaGenerative AI is being embedded into security tools at a furious pace as CISOs adopt the technology internally to automate manual processes and improve productivity. But research also suggests this surge in gen AI adoption comes with a fair amount of trepidation among cybersecurity professionals, which CISOs must keep in mind when weaving gen AI…
-
Forschungsprojekt zum Schutz vor Schwachstellen in frei zugänglicher Software bringt zwei Tools hervor
Frei zugängliche Computerprogramme, die Nutzer herunterladen, verändern und verbreiten dürfen das steckt hinter sogenannten »Open-Source-Softwares«. Entwickler machen davon u. a. Gebrauch, um einzelne Softwaremodule für neue Anwendungen aus einer Datenbank zu beziehen, anstatt sie selbst von Grund auf zu entwickeln. Das Problem: Bei den frei zugänglichen Inhalten treten immer wieder Schwachstellen auf, womit die… First…
-
Starke Passwörter nach BSI IT-Grundschutz in Active Directory? So geht’s!
Werbung Wie kann ich sicherstellen, dass im Active Directory starke Passwörter verwendet werden? Das BSI hat mit seinem “IT-Grundschutz” quasi ein Kochrezept für IT-Administratoren geliefert, um Ressourcen einer Institution zu schützen. Specops Software, führend im Bereich Passwortmanagement- und Authentifizierungslösungen, … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/12/09/starke-passwoerter-nach-bsi-it-grundschutz-in-active-directory-so-gehts/
-
Security Affairs newsletter Round 501 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. RedLine info-stealer campaign targets Russian businesses through pirated corporate software 8Base ransomware group hacked Croatia’s Port of Rijeka…
-
RedLine info-stealer campaign targets Russian businesses through pirated corporate software
An ongoing RedLine information-stealing campaign is targeting Russian businesses using pirated corporate software. Since January 2024, Russian businesses using unlicensed software have been targeted by an ongoing RedLine info-stealer campaign. Pirated software is distributed via Russian online forums, attackers disguise the malware as a tool to bypass licensing for business automation software. Threat actors target…
-
Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions
In yet another software supply chain attack, it has come to light that two versions of a popular Python artificial intelligence (AI) library named ultralytics were compromised to deliver a cryptocurrency miner.The versions, 8.3.41 and 8.3.42, have since been removed from the Python Package Index (PyPI) repository. A subsequently released version has introduced a security…
-
Supply chain compromise of Ultralytics AI library results in trojanized versions
Attackers have compromised Ultralytics YOLO packages published on PyPI, the official Python package index, by compromising the build environment of the popular library for creating custom machine learning models. The malicious code deployed cryptocurrency mining malware on systems that installed the package, but the attackers could have delivered any type of malware.According to researchers from…
-
Morrisons recovers warehouse systems following attack on Blue Yonder
The U.K. supermarket chain was one of several high-profile customers impacted by a ransomware attack against the supply chain management software provider. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/morrisons-recovers-attack-blue-yonder/734863/
-
Pirated corporate software infects Russian businesses with info-stealing malware
First seen on therecord.media Jump to article: therecord.media/russia-businesses-pirated-corporate-software-redline-infostealer-malware
-
Blue Yonder SaaS giant breached by Termite ransomware gang
The Termite ransomware gang has officially claimed responsibility for the November breach of software as a service (SaaS) provider Blue Yonder. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/blue-yonder-saas-giant-breached-by-termite-ransomware-gang/
-
Open Source Security Priorities Get a Reshuffle
The Census of Free and Open Source Software report, which identifies the most critical software projects, sees more cloud infrastructure and Python software designated as critical software components. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/critical-open-source-rankings-shuffle-popularity-python-cloud-grows
-
Microsoft confirms there will be no U-turn on Windows 11 hardware requirements
TPM 2.0 ‘non-negotiable’ for latest OS, says software giant First seen on theregister.com Jump to article: www.theregister.com/2024/12/04/microsoft_windows_11_tpm/
-
Rockwell Automation Warns of Multiple Code Execution Vulnerabilities in Arena
Tags: advisory, automation, cyber, exploit, remote-code-execution, software, vulnerability, zero-dayRockwell Automation has issued a critical security advisory addressing multiple remote code execution (RCE) vulnerabilities discovered in its Arena® software. These vulnerabilities, reported by the Zero Day Initiative (ZDI), expose systems to potential exploitation by adversaries looking to execute arbitrary code. With the release of updated software versions, Rockwell Automation has taken corrective action and…
-
Sicherheitsupdate: Backupsoftware Dell NetWorker kann Daten leaken
Dell hat wichtige Sicherheitspatches für seine Backup- und Recovery-Software NetWorker und das SDK BSAFE veröffentlicht. Noch sind aber nicht alle Updates da. First seen on heise.de Jump to article: www.heise.de/news/Sicherheitsupdate-Backupsoftware-Dell-NetWorker-kann-Daten-leaken-10190285.html
-
8 biggest cybersecurity threats manufacturers face
Tags: access, ai, apt, attack, authentication, automation, awareness, business, china, cloud, computer, control, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, ddos, detection, email, encryption, exploit, extortion, firmware, framework, group, Hardware, india, infrastructure, intelligence, international, Internet, iot, iran, lazarus, leak, malicious, malware, monitoring, network, nis-2, north-korea, open-source, password, phishing, ransom, ransomware, regulation, risk, risk-analysis, risk-assessment, russia, service, software, strategy, supply-chain, technology, threat, update, vulnerability, windowsThe manufacturing sector’s rapid digital transformation, complex supply chains, and reliance on third-party vendors make for a challenging cyber threat environment for CISOs.Manufacturers, often prime targets for state-sponsored malicious actors and ransomware gangs, face the difficult task of maintaining cost-effective operations while modernizing their network infrastructure.”Many manufacturing systems rely on outdated technology that lacks modern…