Tag: software
-
Kurdische Hacktivisten auch in Deutschland aktiv
Die Sicherheitsforscher von Check-Point-External-Risk-Management von Check Point Software Technologies haben zwischen August und Oktober 2025 rund 350 Denial-of-Service-Attacken (DDoS) mit der Gruppe Hezi Rash in Verbindung gebracht, darunter 14,2 Prozent in Deutschland. Unterstrichen wird die Gefährlichkeit dieser Hacktivisten-Gruppe Hezi Rash, was auf kurdisch Schwarze-Kraft oder Schwarze-Truppe heißt, von den Indizien, dass sie mit bekannten cyberkriminellen…
-
Malicious NPM packages fetch infostealer for Windows, Linux, macOS
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component that collects sensitive data from Windows, Linux, and macOS systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-npm-packages-fetch-infostealer-for-windows-linux-macos/
-
Malicious NPM packages fetch infostealer for Windows, Linux, macOS
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component that collects sensitive data from Windows, Linux, and macOS systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-npm-packages-fetch-infostealer-for-windows-linux-macos/
-
PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs
Tags: attack, authentication, credentials, cybersecurity, github, malicious, malware, software, supply-chainCybersecurity researchers have uncovered yet another active software supply chain attack campaign targeting the npm registry with over 100 malicious packages that can steal authentication tokens, CI/CD secrets, and GitHub credentials from developers’ machines.The campaign has been codenamed PhantomRaven by Koi Security. The activity is assessed to have begun in August 2025, when the first…
-
Poseck sieht Verzicht als Sicherheitslücke – So soll Missbrauch von Palantir-Software verhindert werden
First seen on security-insider.de Jump to article: www.security-insider.de/palantir-analyse-software-vera-datenschutz-polizei-einsatz-bayern-a-c3deb5d878519bb833591a71fa5226eb/
-
Check Point und NVIDIA arbeiten gemeinsam an einer integrierten Sicherheitslösung für KI-Fabriken
Der Cybersicherheitsanbieter Check Point Software Technologies Ltd. (NASDAQ: CHKP) stellt gemeinsam mit NVIDIA eine neue Sicherheitslösung für sogenannte ‘KI-Fabriken” vor also Umgebungen, in denen Unternehmen KI-Modelle entwickeln, trainieren und betreiben. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-und-nvidia-arbeiten-gemeinsam-an-einer-integrierten-sicherheitsloesung-fuer-ki-fabriken/a42551/
-
Kein Fix verfügbar: Milliarden von Webbrowsern lassen sich in Sekunden crashen
Eine bisher ungepatchte Sicherheitslücke betrifft Nutzer Chromium-basierter Browser. Die Software lässt sich sekundenschnell zum Absturz bringen. First seen on golem.de Jump to article: www.golem.de/news/kein-fix-verfuegbar-milliarden-von-webbrowsern-lassen-sich-in-sekunden-crashen-2510-201687.html
-
Open-source security group pulls out of U.S. grant, citing DEI restrictions
The Trump administration’s zeal to stamp out diversity, equity and inclusion programs is affecting national cybersecurity research, as a key open-source security foundation announced it would reject federal grant funding. The Python Software Foundation (PSF), which promotes safe and secure Python coding practices and helps oversee PyPI, the world’s largest open-source code repository for Python,…
-
Open-source security group pulls out of U.S. grant, citing DEI restrictions
The Trump administration’s zeal to stamp out diversity, equity and inclusion programs is affecting national cybersecurity research, as a key open-source security foundation announced it would reject federal grant funding. The Python Software Foundation (PSF), which promotes safe and secure Python coding practices and helps oversee PyPI, the world’s largest open-source code repository for Python,…
-
Ex-L3Harris Cyber Boss Pleads Guilty to Selling Trade Secrets to Russian Firm
Peter Williams, a former executive of Trenchant, L3Harris’ cyber division, has pleaded guilty to two counts of stealing trade secrets and selling them to an unnamed Russian software broker. First seen on wired.com Jump to article: www.wired.com/story/peter-williams-trenchant-trade-secrets-theft-russian-firm/
-
Ex-L3Harris Cyber Boss Pleads Guilty to Selling Trade Secrets to Russian Firm
Peter Williams, a former executive of Trenchant, L3Harris’ cyber division, has pleaded guilty to two counts of stealing trade secrets and selling them to an unnamed Russian software broker. First seen on wired.com Jump to article: www.wired.com/story/peter-williams-trenchant-trade-secrets-theft-russian-firm/
-
Integrierte Sicherheitslösung für KI-Fabriken
Check Point Software Technologies arbeitet mit Nvidia zusammen, um eine integrierte Sicherheitslösung für KI-Fabriken anzubieten. AI-Cloud-Protect ist ab sofort für lokale Unternehmensbereitstellungen verfügbar und sichert die Entwicklung von KI-Modellen, Agenten-basierten KI-Anwendungen und Inference-Workloads, ohne die Leistung zu beeinträchtigen. Die Lösung wurde auf Nvidia-RTX-PRO-Servern validiert und ermöglicht Unternehmen die sichere Bereitstellung von KI vom Rechenzentrum […]…
-
Integrierte Sicherheitslösung für KI-Fabriken
Check Point Software Technologies arbeitet mit Nvidia zusammen, um eine integrierte Sicherheitslösung für KI-Fabriken anzubieten. AI-Cloud-Protect ist ab sofort für lokale Unternehmensbereitstellungen verfügbar und sichert die Entwicklung von KI-Modellen, Agenten-basierten KI-Anwendungen und Inference-Workloads, ohne die Leistung zu beeinträchtigen. Die Lösung wurde auf Nvidia-RTX-PRO-Servern validiert und ermöglicht Unternehmen die sichere Bereitstellung von KI vom Rechenzentrum […]…
-
Integrierte Sicherheitslösung für KI-Fabriken
Check Point Software Technologies arbeitet mit Nvidia zusammen, um eine integrierte Sicherheitslösung für KI-Fabriken anzubieten. AI-Cloud-Protect ist ab sofort für lokale Unternehmensbereitstellungen verfügbar und sichert die Entwicklung von KI-Modellen, Agenten-basierten KI-Anwendungen und Inference-Workloads, ohne die Leistung zu beeinträchtigen. Die Lösung wurde auf Nvidia-RTX-PRO-Servern validiert und ermöglicht Unternehmen die sichere Bereitstellung von KI vom Rechenzentrum […]…
-
Python Foundation rejects US government grant earmarked for security improvements
The Python Software Foundation (PSF) has rejected a $1.5 million government grant due to restrictive conditions that would force the foundation to betray its mission and its … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/29/python-foundation-rejects-government-grant/
-
Apache Warns of Critical Tomcat Vulnerabilities Impacting Versions 9, 10, and 11
The Apache Software Foundation has disclosed two new security vulnerabilities affecting multiple versions of Apache Tomcat, warning system administrators to take immediate action. The flaws, identified as CVE-2025-55752 and CVE-2025-55754, were officially announced on October 27, 2025, and impact Tomcat versions 9, 10, and 11. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/apache-tomcat-cve-2025-55752/
-
9 in 10 Exchange servers in Germany still running outsupport software
Cybersecurity agency urges organizations to upgrade or risk total network compromise First seen on theregister.com Jump to article: www.theregister.com/2025/10/29/germany_exchange_support/
-
Apache Warns of Critical Tomcat Vulnerabilities Impacting Versions 9, 10, and 11
The Apache Software Foundation has disclosed two new security vulnerabilities affecting multiple versions of Apache Tomcat, warning system administrators to take immediate action. The flaws, identified as CVE-2025-55752 and CVE-2025-55754, were officially announced on October 27, 2025, and impact Tomcat versions 9, 10, and 11. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/apache-tomcat-cve-2025-55752/
-
XWiki Remote Code Execution Flaw Actively Weaponized for Coinmining
Tags: crypto, cve, cyber, cybersecurity, exploit, flaw, malware, remote-code-execution, software, threat, vulnerabilityA critical security vulnerability in XWiki collaboration software is being actively exploited by threat actors to deploy cryptocurrency mining malware on vulnerable systems. The flaw, tracked as CVE-2025-24893, represents a serious threat to organizations running unpatched XWiki installations. Cybersecurity researchers at VulnCheck have captured concrete evidence of active exploitation through their canary network. CVE Details…
-
XWiki Remote Code Execution Flaw Actively Weaponized for Coinmining
Tags: crypto, cve, cyber, cybersecurity, exploit, flaw, malware, remote-code-execution, software, threat, vulnerabilityA critical security vulnerability in XWiki collaboration software is being actively exploited by threat actors to deploy cryptocurrency mining malware on vulnerable systems. The flaw, tracked as CVE-2025-24893, represents a serious threat to organizations running unpatched XWiki installations. Cybersecurity researchers at VulnCheck have captured concrete evidence of active exploitation through their canary network. CVE Details…
-
Notable post-quantum cryptography initiatives paving the way toward Q-Day
Tags: attack, awareness, cisa, cisco, communications, computer, computing, crypto, cryptography, cyber, cybersecurity, data, encryption, finance, framework, google, government, group, guide, ibm, infrastructure, intelligence, Internet, iot, linux, microsoft, mitre, ml, nist, nvidia, open-source, service, side-channel, software, supply-chain, technology, theft, threat, tool, vulnerabilityIndustry heavyweights line up behind PQC: Google”¯Chrome became the first mainstream browser to support hybrid post”‘quantum key exchanges by default late last year.The approach combines classical elliptic-curve encryption, for backwards compatibility, with lattice-based PQC derived from ML-KEM.Other industry giants, including Amazon and IBM, have also begun laying foundations for quantum-safe cryptography. For example, IBM has…
-
Notable post-quantum cryptography initiatives paving the way toward Q-Day
Tags: attack, awareness, cisa, cisco, communications, computer, computing, crypto, cryptography, cyber, cybersecurity, data, encryption, finance, framework, google, government, group, guide, ibm, infrastructure, intelligence, Internet, iot, linux, microsoft, mitre, ml, nist, nvidia, open-source, service, side-channel, software, supply-chain, technology, theft, threat, tool, vulnerabilityIndustry heavyweights line up behind PQC: Google”¯Chrome became the first mainstream browser to support hybrid post”‘quantum key exchanges by default late last year.The approach combines classical elliptic-curve encryption, for backwards compatibility, with lattice-based PQC derived from ML-KEM.Other industry giants, including Amazon and IBM, have also begun laying foundations for quantum-safe cryptography. For example, IBM has…
-
Delmia Apriso Systems Under Attack
CISA Says Hackers Actively Exploit Manufacturing Operations Management Platform. Software made by a French multinational that’s used to manage manufacturing across the globe is under active attack, warned the Cybersecurity Infrastructure and Security Agency in the second such warning in two months. Hackers are exploiting two vulnerabilities in the Delmia Apriso platform. First seen on…
-
Python rejects $1.5M grant from U.S. govt. fearing ethical compromise
Tags: softwareThe Python Software Foundation (PSF) has withdrawn its $1.5 million grant proposal to the U.S. National Science Foundation (NSF) due to funding terms forcing a compromise on its commitment to diversity, equity, and inclusion.. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/software/python-rejects-15m-grant-from-us-govt-fearing-ethical-compromise/
-
Check Point Allies with NVIDIA to Secure AI Platforms
Check Point Software Technologies Ltd. today revealed it has developed a cybersecurity platform to secure artificial intelligence (AI) factories in collaboration with NVIDIA. Announced at the NVIDIA GTC conference, the AI Cloud Protect platform enables cybersecurity teams to leverage dynamic objects to enforce policies in real time using NVIDIA BlueField-3 data processing units (DPUs) to..…
-
F5 asserts limited impact from prolonged nation-state attack on its systems
The networking software and security company claims most customers are not concerned about their configuration data stolen during the attack. First seen on cyberscoop.com Jump to article: cyberscoop.com/f5-attack-limited-impact-earnings-call/
-
New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves
A group of academic researchers from Georgia Tech, Purdue University, and Synkhronix have developed a side-channel attack called TEE.Fail that allows for the extraction of secrets from the trusted execution environment (TEE) in a computer’s main processor, including Intel’s Software Guard eXtensions (SGX) and Trust Domain Extensions (TDX) and AMD’s Secure Encrypted Virtualization with Secure…
-
Beyond The CVE: Deep Container Analysis with Anchore
As an Associate Professor of Cybersecurity, I spend a lot of time thinking about risk, and increasingly, that risk lives within the software supply chain. The current industry focus on CVEs is a necessary, but ultimately insufficient, approach to securing modern, containerized applications. Frankly, relying on basic vulnerability scanning alone is like putting a single……