Tag: software
-
SolarWinds Serv-U Vulnerability Under Active Attack – Patch Immediately
A recently patched high-severity flaw impacting SolarWinds Serv-U file transfer software is being actively exploited by malicious actors in the wild.T… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/solarwinds-serv-u-vulnerability-under.html
-
Angst vor russischer Spionage: US-Regierung verbietet Software von Kaspersky
First seen on golem.de Jump to article: www.golem.de/news/angst-vor-russischer-spionage-us-regierung-verbietet-software-von-kaspersky-2406-186318.html
-
HubSpot Investigating Cyber Attack Following Customer Account Hacks
Marketing and sales software giant HubSpot announced on Friday that it is investigating a cybersecurity incident following reports of customer account… First seen on gbhackers.com Jump to article: gbhackers.com/hubspot-investigating-cyber-attack/
-
TeamViewer Internal Systems Accessed by APT Hackers
TeamViewer, a leading provider of remote access software, announced that attackers had compromised its internal corporate IT environment. The company’… First seen on gbhackers.com Jump to article: gbhackers.com/teamviewer-internal-systems-accessed/
-
What Building Application Security Into Shadow IT Looks Like
AppSec is hard for traditional software development, let alone citizen developers. So how did two people resolve 70,000 vulnerabilities in three month… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/building-application-security-into-shadow-it
-
Benefits of JSON Log Source Collection for LogRhythm Customers
When it comes to log sources, LogRhythm recognizes there are limitless options. After all, more than 30,000 Softwares as a Service (SaaS) companies ex… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/benefits-of-json-log-source-collection-for-logrhythm-customers/
-
Insurance Software Vendor Notifies 6.1 Million of 2023 Hack
InfoSys McCamish Systems Earlier Alerted 57,000 Bank of America Clients of Breach. Infosys McCamish Systems, an insurance software product and service… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/insurance-software-vendor-notifies-61-million-2023-hack-a-25654
-
TeamViewer links corporate cyberattack to Russian state hackers
RMM software developer TeamViewer says a Russian state-sponsored hacking group known as Midnight Blizzard is believed to be behind a breach of their c… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/teamviewer-links-corporate-cyberattack-to-russian-state-hackers/
-
Progress MOVEit Transfer: Angriffe auf Schwachstelle CVE-2024-5806
In der Software Progress MOVEit Transfer wurde kürzlich die Schwachstelle CVE-2024-5806 bekannt. Bereits kurz nach Veröffentlichung dieser Information… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/26/progress-moveit-transfer-angriffe-auf-schwachstelle-cve-2024-5806/
-
New MOVEit Transfer critical bug is actively exploited
Experts warn of active exploitation of a critical authentication bypass vulnerability in MOVEit Transfer file transfer software. Progress Software add… First seen on securityaffairs.com Jump to article: securityaffairs.com/164949/hacking/progress-moveit-transfer-flaw-actively-exploited.html
-
Bayern setzt auf BigPhish im Kampf gegen Betrüger-Domains‹
Bayern setzt die Software BigPhish gegen Cybercrime ein. Sie soll Phishing-Domains schon kurz nach ihrer Registrierung entdecken und Ermittlern melden… First seen on heise.de Jump to article: www.heise.de/news/Bayern-setzt-auf-BigPhish-im-Kampf-gegen-Betrueger-Domains-9774101.html
-
Warnung vor Kaspersky-Produkten nach US-Sanktionen noch immer aktuell
Bereits im Jahr 2022 warnte das BSI vor Antivirus-Software des russischen Herstellers das bleibt auch nach Bekanntwerden der US-Schritte gegen Kaspers… First seen on heise.de Jump to article: www.heise.de/news/BSI-Warnung-vor-Kaspersky-Produkten-nach-US-Sanktionen-noch-immer-aktuell-9777085.html
-
Ein Rat aus der Schweiz – Finanzkontrolle empfiehlt On-Premise-Software
First seen on security-insider.de Jump to article: www.security-insider.de/finanzkontrolle-empfiehlt-on-premise-software-a-59c303d49fb2cf3402c1480740b8048a/
-
Updates empfohlen! – SolarWinds schließt mehrere Lücken in seiner Software
First seen on security-insider.de Jump to article: www.security-insider.de/solarwinds-software-sicherheitsupdates-a-aa8e5bdd93fe5a9635d2f2edec4500c1/
-
NiceRAT Malware Targets South Korean Users via Cracked Software
Threat actors have been observed deploying a malware called NiceRAT to co-opt infected devices into a botnet.The attacks, which target South Korean us… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/nicerat-malware-targets-south-korean.html
-
What is DevSecOps and Why is it Essential for Secure Software Delivery?
Traditional application security practices are not effective in the modern DevOps world. When security scans are run only at the end of the software d… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/what-is-devsecops-and-why-is-it.html
-
ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models
ASUS has shipped software updates to address a critical security flaw impacting its routers that could be exploited by malicious actors to bypass auth… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/asus-patches-critical-authentication.html
-
Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer
Threat actors are luring unsuspecting users with free or pirated versions of commercial software to deliver a malware loader called Hijack Loader, whi… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/cybercriminals-exploit-free-software.html
-
Warning: Markopolo’s Scam Targeting Crypto Users via Fake Meeting Software
A threat actor who goes by alias markopolo has been identified as behind a large-scale cross-platform scam that targets digital currency users on soci… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/warning-markopolos-scam-targeting.html
-
New MOVEit Transfer Vulnerability Under Active Exploitation – Patch ASAP!
A newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/new-moveit-transfer-vulnerability-under.html
-
The Software Licensing Disease Infecting Our Nation’s Cybersecurity
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/software-licensing-disease-infecting-our-nations-cybersecurity
-
‘Vortax’ Meeting Software Builds Elaborate Branding, Spreads Infostealers
The Markopolo threat actors built a convincing brand and Web presence for fake software to deliver the dangerous Atomic macOS stealer, among other mal… First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/vortax-meeting-software-branding-spreads-infostealers
-
Thousands of Car Dealerships Stalled Out After Software Provider Cyberattack
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/thousands-of-car-dealerships-stalled-out-after-software-provider-cyber-incident
-
Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806)
Progress Software has patched one critical (CVE-2024-5805) and one high-risk (CVE-2024-5806) vulnerability in MOVEit, its widely used managed file tra… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/25/cve-2024-5805-cve-2024-5806/
-
President Biden Bans Kaspersky Antivirus Software Over Russia Ties
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36020/President-Biden-Bans-Kaspersky-Antivirus-Software-Over-Russia-Ties.html
-
Microsoft-Mitarbeiter veröffentlicht versehentlich PlayReady-Code
Fall von extrem dumm gelaufen, kommt aber gelegentlich bei diesem Microsoft vor. Ein Software-Entwickler von Microsoft hat interne Quellcodes von Play… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/06/26/microsoft-mitarbeiter-verffentlicht-versehentlich-playready-code/
-
Crooks plant backdoor in software used by courtrooms around the world
First seen on arstechnica.com Jump to article: arstechnica.com/
-
Scattered Spider Targets SaaS Platforms For Data Exfiltration
The Scattered Spider threat group in recent months has been targeting software-as-a-service (SaaS) applications for data theft and leveraging virtuali… First seen on duo.com Jump to article: duo.com/decipher/scattered-spider-group-eyes-saas-platforms-for-data-exfiltration
-
Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider
Car dealerships in North America are still wrestling with major disruptions that started last week with cyberattacks on a company whose software is us… First seen on securityweek.com Jump to article: www.securityweek.com/car-dealerships-in-north-america-revert-to-pens-and-paper-after-cyberattacks-on-software-provider/
-
Hiscout und PwC Deutschland bündeln Kräfte für effizienteres Management im Cybersecurity-Umfeld
Hiscout, führender Anbieter von GRC-Software, und PwC Deutschland haben eine strategische Partnerschaft geschlossen. Gemeinsam wollen die Unternehmen … First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/06/18/hiscout-und-pwc-deutschland-buendeln-kraefte-fuer-effizienteres-management-im-cybersecurity-umfeld/