Die Kryptobörse Coinbase hat ein Datenleck gemeldet. Angreifer haben sensible Daten erbeutet und wollen Schweigegeld erpressen. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Kryptobörse Coinbase: Datenleck nach Cyberangriff
Author: wordpress
Erstelle ein sicheres Passwort, das sich leicht merken lässt | Offizieller Blog von Kaspersky
Heiße Tipps, wie du einzigartige und starke Passwörter erstellst und dir deine Passwörter am besten einprägst. Und was neuronale Netzwerke damit zu tun haben. Dieser Artikel wurde indexiert von Offizieller Blog von Kaspersky Lesen Sie den originalen Artikel: Erstelle ein…
US-Unternehmen Proofpoint: Hornetsecurity aus Hannover für 1 Milliarde Dollar gekauft
Proofpoint kauft Hornetsecurity, einen Experten für Cloud-E-Mail-Security und -Backup. Es ist die bisher größte Übernahme für das kalifornische Security-Unternehmen. (Security, Microsoft 365) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: US-Unternehmen Proofpoint: Hornetsecurity aus Hannover…
Locked Out and Held for Ransom: A City’s Battle Against Cybercrime
Read how having a plan and doing some preparation in advance can lessen the severity of a ransomware attack ? or prevent one altogether. This article has been indexed from Blog Read the original article: Locked Out and Held for…
FrigidStealer Malware Hits macOS Users via Fake Safari Browser Updates
FrigidStealer malware targets macOS users via fake browser updates, stealing passwords, crypto wallets, and notes using DNS-based data… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: FrigidStealer Malware…
Windows Defender Application Control Bypassed Through Browser Exploit Techniques
Security researchers from the X-Force Red Adversary Simulation team have uncovered a novel method to bypass Windows Defender Application Control (WDAC), a robust Windows security feature designed to prevent unauthorized code execution through strict application whitelisting policies. Often deployed in…
Weaponized Google Calendar Invites Deliver Malicious Payload Using a Single Character
Security researchers have unearthed a sophisticated malware distribution method leveraging Google Calendar invites to deliver malicious payloads through seemingly innocuous links. The attack, centered around a deceptive npm package named os-info-checker-es6, showcases an unprecedented level of obfuscation that begins with…
Russian Hackers Exploit XSS Vulnerabilities to Inject Malicious Code into Email Servers
A sophisticated cyberespionage campaign, dubbed Operation RoundPress, has been uncovered by cybersecurity researchers at ESET. Attributed with medium confidence to the Russian-linked Sednit group-also known as APT28, Fancy Bear, and Forest Blizzard-this operation targets high-value webmail servers using cross-site scripting…
Phishing Campaign Mimics Email Quarantine Notifications: 32,000 Emails Target 6,358 Customers
In a recent discovery, Check Point researchers have identified a large-scale phishing campaign that exploits the guise of email quarantine notifications. This campaign, consisting of 32,000 emails, has targeted 6,358 customers across various regions. The primary objective of the attackers…
Threat landscape for industrial automation systems in Q1 2025
Kaspersky ICS CERT shares trends and statistics on industrial threats in Q1 2025. This article has been indexed from Securelist Read the original article: Threat landscape for industrial automation systems in Q1 2025
Russian Hackers Exploiting MDaemon 0-Day Vulnerability to Hack Webmail Servers
A recently uncovered cyber-espionage campaign linked to Russian state-sponsored actors has been targeting enterprise webmail servers using a critical zero-day vulnerability in MDaemon, a widely used email server software. Dubbed “MailStorm” by researchers, the campaign exploits an unpatched buffer overflow…
Hackers Disguised Remote Access Malware as Microsoft Edge service
A sophisticated backdoor campaign in which attackers cleverly disguised remote access malware as a legitimate Microsoft Edge service. The malicious Mesh agent, masquerading under the path C:\Program Files\Microsoft\MicrosoftEdge\msedge.exe, was found running on multiple computers and servers across the affected network.…
Threat Actors Using Weaponized HTML Files to Deliver Horabot Malware
A new wave of sophisticated phishing campaigns targeting Spanish-speaking users in Latin America has emerged, leveraging weaponized HTML files to deploy the Horabot malware. First identified in April 2025 by Fortinet’s FortiGuard Labs, Horabot combines credential theft, email automation, and…
Interlock Ransomware Attacking Defense Contractors and Their Supply Chains
A dangerous ransomware operation dubbed Interlock has escalated its focus on defense contractors and their supply chains, jeopardizing sensitive military logistics, intellectual property, and national security. First observed in September 2024, the group employs “big-game hunting” tactics-targeting high-value organizations-and double…
DHS Cancels $2.4 Billion Leidos Contract, Cites Changes at CISA
DHS cancelled a $2.4 billion contract to Leidos that was awarded last year for ACTS, a project aimed at supporting CISA. Rival Nightwing protested the award, but DHS said the contract was pulled in light of budgetary and mission changes…
SAP-Netweaver-Lücke: Ransomware-Gruppen springen auf
Ende April musste SAP eine kritische Sicherheitslücke in Netweaver schließen. Ransomware-Gruppierungen greifen das Leck nun auch an. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: SAP-Netweaver-Lücke: Ransomware-Gruppen springen auf
DoS-Attacken auf Dells Monitoringtool PowerScale InsightIQ vorstellbar
Zwei Sicherheitslücken gefärhden Dell PowerScale InsightIQ. Aktuelle Versionen sind abgesichert. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: DoS-Attacken auf Dells Monitoringtool PowerScale InsightIQ vorstellbar
DarkCloud Stealer Employs AutoIt to Evade Detection and Steal Login Credentials
Unit 42 researchers from Palo Alto Networks have uncovered a series of attacks in January 2025 involving the DarkCloud Stealer malware. This infostealer, first observed in 2022, has evolved with new tactics to bypass traditional detection mechanisms. By leveraging AutoIt…
TransferLoader Malware Enables Attackers to Execute Arbitrary Commands on Infected Systems
A formidable new malware loader, dubbed TransferLoader, has emerged as a significant cybersecurity threat, as detailed in a recent report by Zscaler ThreatLabz. Active since at least February 2025, this sophisticated malware has been observed deploying multiple components, including a…
U.S. Officials Probe Rogue Communication Devices in Solar Power Inverters
U.S. energy officials are intensifying scrutiny of Chinese-manufactured power inverters, critical components in renewable energy systems, after discovering undocumented communication equipment embedded within them. These inverters, predominantly produced in China, are essential for connecting solar panels, wind turbines, batteries, heat…