Security researchers have identified a critical vulnerability in Ivanti Connect Secure (ICS) VPN appliances that is being actively exploited by suspected Chinese threat actors. The vulnerability, tracked as CVE-2025-22457, is a buffer overflow flaw affecting ICS version 22.7R2.5 and earlier…
Scheinbar leegreräumte Konten: Cyberangriff auf australische Pensionsfonds
Die größten Pensionsfonds in Australien sind Ziel von Cyberangriffen geworden, deren Ausmaß noch unklar ist. Teilweise erscheinen ganze Konten leer geräumt. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Scheinbar leegreräumte Konten: Cyberangriff auf australische…
Halo ITSM Vulnerability Lets Attackers Inject Malicious SQL Code
A critical security flaw has been discovered in Halo ITSM, an IT support management software widely deployed across cloud and on-premise environments. The vulnerability, which allows attackers to inject malicious SQL code, poses a significant threat to organizations relying on the…
IT Security News Hourly Summary 2025-04-04 09h : 8 posts
8 posts were published in the last hour 6:34 : Nur als Bug klassifiziert: Kritische Sicherheitslücke in Ivanti ICS attackiert 6:34 : Signal: Pentagon ermittelt gegen Hegseth in Chat-Affäre 6:33 : Cyber Attack Hits Multiple Major Superannuation Providers in Australia,…
US-Verteidigungsminister: Pentagon-Aufsicht prüft Verhalten in Signal-Affäre
Verstieß der US-Verteidigungsminister gegen Geheimhaltungsregeln, als er per Signal Details über eine Militäroperation teilte? Das wird jetzt geprüft. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: US-Verteidigungsminister: Pentagon-Aufsicht prüft Verhalten in Signal-Affäre
Capacity is Critical in Riskier Threat Landscape
International cooperation, reporting, and capacity building are critical to enhance cybersecurity defenses. Effective governance in an increasingly risky landscape requires visibility as well as coordinated vulnerability disclosure. This article has been indexed from Trend Micro Research, News and Perspectives Read…
Australian Pension Funds Hacked: Members Face Financial Losses
Several of Australia’s largest superannuation funds have been targeted in a coordinated cyberattack, leading to unauthorized access to customer accounts and financial losses for some members. Among those affected are major funds such as REST, Hostplus, AustralianSuper, Australian Retirement Trust,…
39M secrets exposed: GitHub rolls out new security tools
39 Million Secrets Leaked on GitHub in 2024 GitHub found 39M secrets leaked in 2024 and launched new tools to help developers and organizations secure sensitive data in code. Microsoft-owned code hosting platform GitHub announced the discovery of 39 million…
OpenVPN Vulnerability Let Attackers Crash Servers & Execute Remote Code
A critical security vulnerability in OpenVPN has been discovered that could allow attackers to crash servers, potentially disrupting secure communications for thousands of users worldwide. The vulnerability, identified as CVE-2025-2704, affects OpenVPN versions 2.6.1 through 2.6.13 when configured with the…
Apache Traffic Server Vulnerability Let Attackers Smuggle Requests
A critical security vulnerability in Apache Traffic Server (ATS) has been discovered. By exploiting how the server processes chunked messages, attackers can perform request smuggling attacks. The vulnerability, tracked as CVE-2024-53868, affects multiple versions of this high-performance HTTP proxy server…
Google patches Quick Share, ChatGPT temporary outage, UK Mail breach
Google patches Quick Share vulnerability ChatGPT suffered brief outage Wednesday UK’s Royal Mail investigates data leak claims Thanks to today’s episode sponsor, Qualys “Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify…
Datenverluste mit Backup-Strategien verhindern
Moderne IT-Infrastrukturen benötigen effektive Datensicherungs- und Wiederherstellungslösungen. Durch robuste Backup-Strategien können Unternehmen Datenverluste minimieren und dadurch betriebsfähig bleiben. Dieser Artikel wurde indexiert von Newsfeed Lesen Sie den originalen Artikel: Datenverluste mit Backup-Strategien verhindern
Falsch eingeschätzt: Bug in Ivanti ICS ist Sicherheitsleck und wird angegriffen
Ivanti hat einen Bug in der VPN-Software Connect Secure falsch eingeschätzt. Es handelt sich um eine Sicherheitslücke, die angegriffen wird. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Falsch eingeschätzt: Bug in Ivanti ICS ist…
Frida Penetration Testing Toolkit Updated with Advanced Threat Monitoring APIs
In a significant update to the popular dynamic instrumentation toolkit Frida, developers have introduced powerful new APIs for advanced threat monitoring and software analysis. These enhancements, released on April 4, 2025, offer security researchers and penetration testers unprecedented capabilities in…
Ex-ASML, NXP staffer accused of stealing chip secrets, peddling them to Moscow
We’re not Putin up with this alleged industrial espionage, say the Dutch A Russian national appeared in a Netherlands court on Thursday accused of industrial espionage against ASML, the world’s leading manufacturer of chip factory equipment and a key supplier…
Cybersecurity Today: Unauthorized Scans, Signal App Usage, AI Image Risks, and a Missing Professor
In this episode, host Jim Love discusses a rise in unauthorized network scans targeting Juniper and Palo Alto devices, raising concerns about espionage and botnet activities. The podcast also delves into the controversial use of the Signal app by National…
Nur als Bug klassifiziert: Kritische Sicherheitslücke in Ivanti ICS attackiert
Ivanti hat einen Bug in der VPN-Software Connect Secure falsch eingeschätzt. Es handelt sich um eine Sicherheitslücke, die angegriffen wird. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Nur als Bug klassifiziert: Kritische Sicherheitslücke in…
Signal: Pentagon ermittelt gegen Hegseth in Chat-Affäre
Verstoß gegen Geheimhaltungspflichten? Das Pentagon untersucht, ob der US-Verteidigungsminister Kriegspläne über Signal weitergegeben hat. (Signal, Instant Messenger) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Signal: Pentagon ermittelt gegen Hegseth in Chat-Affäre
Cyber Attack Hits Multiple Major Superannuation Providers in Australia, Resulting in Fund Theft and Account Lockdowns
A cyberattack targeting five of Australia’s leading superannuation providers has reportedly resulted in significant financial theft and widespread account disruptions. The breach, which affected several prominent organizations, has seen one of the providers lose over $500,000 in funds. Additionally, accounts…
5 Reasons to Secure Firmware in Financial Services Organizations
The post 5 Reasons to Secure Firmware in Financial Services Organizations appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise. The post 5 Reasons to Secure Firmware in Financial Services Organizations appeared first on Security Boulevard. This…
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware
Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect Secure that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-22457 (CVSS score: 9.0), concerns a case of a stack-based buffer overflow that…
Retirement funds reportedly raided after unexplained portal probes and data theft
Australians checking their pensions are melting down call centres and websites Australian retirement fund operators are scrambling after reports emerged of unauthorized access to customer accounts leading to theft of cash.… This article has been indexed from The Register –…
Forward-thinking CISOs are shining a light on shadow IT
In this Help Net Security interview, Curtis Simpson, CISO and Chief Advocacy Officer at Armis, discusses how CISOs can balance security and innovation while managing the risks of shadow IT. Rather than focusing on restrictive policies, fostering proactive partnerships with…
April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft
Microsoft is continuing to build on their AI cybersecurity strategy and this month announced the introduction of new agents in Microsoft Security Copilot. They are introducing agents for phishing triage, alert triage for data loss prevention and insider risk management,…