Tag: software
-
Ransomhub entthront Lockbit3 als aktivste Ransomware-Gruppe
Check Point Software Technologies hat seinen Global-Threat-Index für Juni 2024 veröffentlicht. Im vergangenen Monat stellten die Forscher von CPR ein… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/10/ransomhub-entthront-lockbit3-als-aktivste-ransomware-gruppe/
-
Microsoft verschärft Sicherheitsvorkehrungen für OneNote
Nachdem Microsofts OneNote in den letzten Monaten immer häufiger in Phishing-Kampagnen missbraucht wurde, verschärft das Software-Unternehmen jetzt di… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/microsoft-verscharft-sicherheitsvorkehrungen-fur-onenote
-
CISA Takedown of Ivanti Systems Is a Wake-up Call
The exploitation of vulnerabilities in Ivanti’s software underscores the need for robust cybersecurity measures and proactive response strategies to m… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cisa-takedown-ivanti-systems-is-wake-up-call
-
Russian Media Uses AI-Powered Software to Spread Disinformation
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russia-rt-ai-software/
-
Secure by Design: OS-Command-Injection im Visier von CISA und FBI
Unter der Marke Secure by Design veröffentlichen CISA und FBI in loser Reihe Tipps und Hinweise, mit denen Unternehmen sicherere Software erstellen kö… First seen on heise.de Jump to article: www.heise.de/news/Secure-by-Design-OS-Command-Injection-im-Visier-von-CISA-und-FBI-9797451.html
-
White House Calls for Defending Critical Infrastructure
Administration Continues to Shift Software Security Responsibilities to Developers. The Biden administration is calling on government agencies and dep… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/white-house-calls-for-defending-critical-infrastructure-a-25757
-
How AI-powered software spreads Russian disinformation on X
The US Justice Department (DoJ) has seized two US-based domains used by Russian threat actors to create fake profiles on X (formerly Twitter) that wou… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/10/russian-disinformation-x/
-
MSSPs as Acquisition Targets: Software Vendor Snaps Up Nuspire
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/pdi-technologies-acquisition-of-nuspire-not-your-typical-mssp-deal
-
Attacks leveraging Veeam backup software flaw launched by novel ransomware gang
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attacks-leveraging-veeam-backup-software-flaw-launched-by-novel-ransomware-gang
-
Software Productivity Tools Hijacked to Deliver Infostealers
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/software-productivity-tools-hijacked-to-deliver-infostealers
-
CISA offers tools to promote secure use of open-source software
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/cisa-offers-tools-to-promote-secure-use-of-open-source-software
-
CISA urges devs to weed out OS command injection vulnerabilities
‹CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shippi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-urges-devs-to-weed-out-os-command-injection-vulnerabilities/
-
Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deli… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/chinese-hackers-exploiting-cisco.html
-
US Disrupts AI-Powered Russian Bot Farm on X
The US and allies blame Russian state-sponsored threat actors for using Meliorator AI software to create a social media bot farm. The post US Disrupts… First seen on securityweek.com Jump to article: www.securityweek.com/us-disrupts-ai-powered-russian-bot-farm-on-x/
-
CISA warns about directory traversal vulnerabilities
On May 02, 2024, CISA and the FBI released a Security by Design alert to all software manufacturers and customers regarding an ongoing security vulner… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/cisa-warns-directory-traversal-vulnerabilities/
-
Eclypsium and Everfox Partner to Deliver Enhanced Security for the Technology Supply Chain of the U.S. Government
Portland, OR July 11, 2024 Eclypsium, the leader in digital supply chain security for enterprise hardware, firmware and software infrastructure, today… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/eclypsium-and-everfox-partner-to-deliver-enhanced-security-for-the-technology-supply-chain-of-the-u-s-government/
-
Australia Flags Persistent Chinese Cyberespionage Hacking
Nation-State Group APT40 Routinely Exploits Publicly Known Software Flaws. The Australian cybersecurity agency is blaming a Chinese state-backed cyber… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/australia-flags-persistent-chinese-cyberespionage-hacking-a-25737
-
Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware
Installers for three different software products developed by an Indian company named Conceptworld have been trojanized to distribute information-stea… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/indian-software-firms-products-hacked.html
-
PTC License Server Bug Needs Immediate Patch Against Critical Flaw
Creo Elements/Direct License Servers, which enable industrial design and modeling software, are exposed to the Internet, leaving critical infrastructu… First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/ptc-license-server-bug-needs-immediate-patch-against-critical-flaw
-
HCL Domino Vulnerability Let Attackers obtain Sensitive information
A critical security vulnerability has been discovered in HCL Domino, a popular enterprise server software, that could potentially expose sensitive con… First seen on gbhackers.com Jump to article: gbhackers.com/hcl-domino-vulnerability/
-
Malware in Open Source-Software: Wie groß ist die Bedrohung der IT-Sicherheit wirklich?
Im März 2024 machte die Entdeckung einer Backdoor in den zur Komprimierung genutzten xz-Tools und Bibliotheken Schlagzeilen. Aber wie groß ist die Bed… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/07/08/malware-in-open-source-software-wie-gro-ist-die-bedrohung-der-it-sicherheit-wirklich/
-
Cloud-Security mit Managed-CNAPP
Check Point Software Technologies hat schon oft darauf verwiesen, dass Unternehmen zunehmend auf Cloud-native Lösungen setzen, um ihr Geschäft voranzu… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/04/cloud-security-mit-managed-cnapp/
-
US Busts Russian AI-Driven Disinformation Operation
Meliorator Software Generates Social Media Bots. U.S. federal authorities seized two web domains they said supported an artificial intelligence-driven… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-busts-russian-ai-driven-disinformation-operation-a-25729
-
SAP Patches High-Severity Vulnerabilities in PDCE, Commerce
Patch Tuesday: Enterprise software vendor SAP releases patches for high-severity vulnerabilities in multiple products and tools. The post SAP Patches … First seen on securityweek.com Jump to article: www.securityweek.com/sap-patches-high-severity-vulnerabilities-in-pdce-commerce/
-
Patch Now: Cisco Zero-Day Under Fire From Chinese APT
Threat actor Velvet Ant has been exploiting a vulnerability in Cisco’s NX-OS Software for managing a variety of switches, executing commands and dropp… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/patch-now-cisco-zero-day-chinese-apt
-
China-Backed Threat Group Rapidly Exploits New Flaws: Agencies
APT40, a threat group backed by China’s government, quickly adapts POC exploits of popular software like Microsoft Exchange and Log4j to attack corpor… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/china-backed-threat-group-rapidly-exploits-new-flaws-agencies/
-
Datenschutzverletzung im großen Stil Lernen aus dem ATT-Hack
Software-Lieferketten haben sich zu komplizierten Netzen entwickelt, die in hohem Maße auf Open-Source-Bibliotheken angewiesen sind. Immer mehr Untern… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/07/01/datenschutzverletzung-im-grossen-stil-lernen-aus-dem-att-hack/
-
Apache fixed a source code disclosure flaw in Apache HTTP Server
The Apache Foundation addressed a critical source code disclosure vulnerability, tracked as CVE-2024-39884, in the HTTP Server. The Apache Software Fo… First seen on securityaffairs.com Jump to article: securityaffairs.com/165422/security/apache-source-code-disclosure-flaw-apache-http-server.html
-
CISA Advances Open-Source Software Security with Strategic Initiatives and Community Collaboration
The Cybersecurity and Infrastructure Security Agency (CISA) has announced its next phase to enhance the security of open-source software (OSS) through… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-announces-open-source-software-security/
-
Verkaufsstopp von Kaspersky-Antiviren-Lösung Regierung verbietet russische Antiviren-Software Kaspersky
First seen on security-insider.de Jump to article: www.security-insider.de/us-regierung-verbietet-russische-antiviren-software-kaspersky-a-b23230c0a29808979b177b6d44e10233/