Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen oder Dateien zu manipulieren. Dieser Artikel wurde indexiert von BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) Lesen Sie den originalen Artikel: [NEU] [mittel]…
Medusa Ransomware Disables Anti-Malware Tools with Stolen Certificates
Cybercriminals exploit AbyssWorker driver to disable EDR systems, deploying MEDUSA ransomware with revoked certificates for stealthy attacks. This article has been indexed from Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News Read the original article: Medusa Ransomware Disables…
New Phishing Attack Uses Browser-in-the-Browser Technique to Target Gamers
A sophisticated phishing campaign has been uncovered by Silent Push threat analysts, employing the browser-in-the-browser (BitB) technique to target gamers, particularly those playing Counter-Strike 2 on the Steam platform. This campaign involves creating fake but realistic browser pop-up windows that…
Malicious VS Code Extensions Target Developers with ShibaCoin Ransomware
Researchers from Reversing Labs have identified two malicious Visual Studio Code (VS Code) extensions that are distributing ransomware to unsuspecting developers. The extensions, named “ahban.shiba” and “ahban.cychelloworld,” are currently under development and pose a significant threat to users who install…
New Specter Insight C2 Tool Fuels ClickFix-Based Hacking Campaigns
A recent cybersecurity investigation has uncovered a previously unidentified Command and Control (C2) framework, dubbed Specter Insight C2. This discovery was made by a team of researchers who have been analyzing recent hacking campaigns, including those utilizing ClickFix tactics, as per a report…
New Malware Attacking Android Users Abusing Cross-Platform Framework For Evasion
Cybercriminals have developed sophisticated malware campaigns targeting Android users by exploiting .NET MAUI, a cross-platform development framework, to evade traditional security measures. These threats disguise themselves as legitimate banking and social networking applications to harvest sensitive information from unsuspecting users.…
Chinese APT Weaver Ant Targeting Telecom Providers in Asia
Weaver Ant, a cyberespionage-focused APT operating out of China, is targeting telecom providers for persistent access. The post Chinese APT Weaver Ant Targeting Telecom Providers in Asia appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface
Organizations now use an average of 112 SaaS applications—a number that keeps growing. In a 2024 study, 49% of 644 respondents who frequently used Microsoft 365 believed that they had less than 10 apps connected to the platform, despite the…
Dark Web Mentions of Malicious AI Tools Spike 200%
Kela researchers detect a 200%+ increase in dark web chatter about malicious AI tools This article has been indexed from www.infosecurity-magazine.com Read the original article: Dark Web Mentions of Malicious AI Tools Spike 200%
OpenAI’s Lightcap To Take On Expanded Role
OpenAI chief operating officer Brad Lightcap to oversee international expansion as company consolidates lead in AI industry This article has been indexed from Silicon UK Read the original article: OpenAI’s Lightcap To Take On Expanded Role
Report on Paragon Spyware
Citizen Lab has a new report on Paragon’s spyware: Key Findings: Introducing Paragon Solutions. Paragon Solutions was founded in Israel in 2019 and sells spyware called Graphite. The company differentiates itself by claiming it has safeguards to prevent the kinds…
Will the FDA Start Banning Chinese-Made Medical Devices?
Interview with Joe Silvia, CEO of MedWare Cyber Click here to listen. In late January, the FDA issued a safety warning on Contec CMS8000 patient monitors and those relabeled as MN-120. The Chinese-made devices, used by thousands of medical institutions…
Addressing Security Challenges in Cloud-Based Social Networks
SDN offers a flexible, intelligent solution to address these challenges, empowering platforms to optimize performance, allocate resources effectively, enhance security and deliver seamless user experiences. The post Addressing Security Challenges in Cloud-Based Social Networks appeared first on Security Boulevard. This…
Rückzug aus der Cloud: Ernüchterung nach der Euphorie
So manche Firma ändert derzeit ihre Cloudstrategie, nicht nur wegen Trumps neuer Präsidentschaft. Denn Gründe für den Ausstieg aus der Cloud gibt es viele. (Cloud, Google) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Rückzug…
FBI Warns of File Convertor Tools Used to Deploy Ransomware
The Federal Bureau of Investigation’s Denver Field Office has issued an urgent alert regarding a sophisticated cybersecurity threat that has been increasingly targeting individuals and organizations across the United States. Threat actors are now deploying malicious software disguised as free…
Oops! Google accidentally deletes some users’ Maps Timeline data
Google has admitted it accidentally deleted some Maps Timeline user data after what it calls a “technical issue”. This article has been indexed from Malwarebytes Read the original article: Oops! Google accidentally deletes some users’ Maps Timeline data
Hacker Conversations: Frank Trezza – From Phreaker to Pentester
Frank Trezza is fairly typical of most hackers. Early pranks sometimes leading to something more serious. The post Hacker Conversations: Frank Trezza – From Phreaker to Pentester appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
IT Security News Hourly Summary 2025-03-25 12h : 9 posts
9 posts were published in the last hour 10:33 : Signal-Messenger: Journalist erfährt US-Kriegsplanung in Regierungschat 10:33 : Nasa: E-Mail-Panne flutet Postfächer der Raumfahrtindustrie 10:33 : [NEU] [mittel] QT: Schwachstelle ermöglicht Denial of Service 10:33 : [NEU] [hoch] Ingress NGINX…
Signal-Messenger: Journalist erfährt US-Kriegsplanung in Regierungschat
Ein versehentlich in einen Signal-Gruppenchat eingeladener Journalist ist Zeuge der US-Militärplanung gegen die Huthis geworden. (Instant Messenger, Politik) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Signal-Messenger: Journalist erfährt US-Kriegsplanung in Regierungschat
Nasa: E-Mail-Panne flutet Postfächer der Raumfahrtindustrie
Jemand hat wohl versehentlich eine E-Mail an einen riesigen Verteiler der Nasa geschickt. Unzählige Postfächer sind geflutet worden – auch durch Antworten. (E-Mail, Spam) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Nasa: E-Mail-Panne flutet…
[NEU] [mittel] QT: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um einen Denial of Service Angriff durchzuführen. Dieser Artikel wurde indexiert von BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) Lesen Sie den originalen Artikel: [NEU] [mittel] QT: Schwachstelle ermöglicht…
[NEU] [hoch] Ingress NGINX Controller für Kubernetes: Mehrere Schwachstellen
Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im Ingress NGINX Controller für Kubernetes ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen. Dieser Artikel wurde indexiert von BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security…
Pat Gelsinger Joins Faith-Based Tech Company Gloo
Former Intel chief Gelsinger expands role at Gloo, becoming executive chairman and head of technology amidst move into AI This article has been indexed from Silicon UK Read the original article: Pat Gelsinger Joins Faith-Based Tech Company Gloo
China Unveils Deep-Sea Cable-Cutting Device
Chinese researchers publish details on device that could wreak havoc on undersea communications cables in times of crisis This article has been indexed from Silicon UK Read the original article: China Unveils Deep-Sea Cable-Cutting Device