Microsoft’s AI tool catches critical GRUB2, U-boot bootloader flaws
Microsoft’s Threat Intelligence team has leveraged its AI-driven Security Copilot tool to identify 20 critical vulnerabilities in widely used open-source bootloaders — GRUB2, U-Boot, and Barebox....
View ArticleHacker stiehlt Kundendaten von Samsung Deutschland
Samsung Deutschland ist von einem Datenleck betroffen.Samsung Deutschland Bei Samsung Deutschland hat es offenbar ein massives Datenleck gegeben. Etwa 270.000 Kundendatensätze von Samsung Electronics...
View ArticleThreat-informed defense for operational technology: Moving from information...
As the threat landscape continues to evolve, critical infrastructure sectors face a growing wave of sophisticated cyber threats. Traditional security strategies that focus solely on indicators of...
View ArticleSolarWinds launches incident response tool, boosts AI in observability platform
SolarWinds this week introduced a new incident response product and announced AI-based updates to its observability platform and service management product that are aimed at strengthening IT...
View ArticleYears-old login credential leads to leak of 270,000 Samsung customer records
Samsung Germany has apparently suffered a massive data breach, with approximately 270,000 customer records currently being offered for sale on a dark web forum. A criminal hacker using the pseudonym...
View ArticleVeterans are an obvious fit for cybersecurity, but tailored support ensures...
With a bachelor’s degree in computer science, some cybersecurity work experience, and more than 20 years of US Army and National Guard service, Chris Elgee would seem perfectly positioned to easily...
View ArticleAI disinformation didn’t upend 2024 elections, but the threat is very real
The 2024 election cycle was widely feared to be a watershed moment when artificial intelligence fundamentally changed the disinformation battlefield as deepfake videos, AI-generated propaganda, and...
View ArticleHackerangriff auf Heilbronner Marketing
width="2421" height="1362" sizes="(max-width: 2421px) 100vw, 2421px">Hacker haben die IT-Systeme der Heilbronn Marketing verschlüsselt.Suttipun – shutterstock.com Laut einem Bericht des...
View ArticleOracle quietly admits data breach, days after lawsuit accused it of cover-up
Oracle has finally admitted to suffering a significant data breach, quietly notifying select customers about the security incident just days after being hit with a class action lawsuit that accused...
View ArticleGitHub upgrades tooling to help developers stop leaking secrets
Over 39 million API keys, credentials, and other secrets leaked onto GitHub’s platform last year, but an update to its scanning tool could help stop that. The widely used cloud-based version-control...
View ArticleSurge in threat actors scanning Juniper, Cisco, and Palo Alto Networks devices
A surge in internet probes targeting devices from Juniper Networks, Cisco Systems, and Palo Alto Networks should put their admins on alert, say security experts. A threat actor is probing the internet...
View ArticleToo little budget for OT security despite rising threats
Despite OT security increasingly becoming a mainstream concern, only 27% of companies delegate budget control over securing their operations infrastructure to their CISOs or CSOs, according to global...
View ArticleAI programming copilots are worsening code security and leaking more secrets
AI coding assistants are among the early success stories of the generative AI revolution in business. Increasingly adopted, programming copilots are making inroads into development processes,...
View ArticlePrivilegierte Zugänge werden zum Sicherheitsrisiko
Kriminelle bevorzugen Phishing als Erstzugriffsmethode und nutzen legale Tools für unauffällige Angriffe auf sensible Systeme, wie eine aktuelle Studie herausfand. shutterstock – Olivier Le Moal Der...
View ArticleCyberkriminalität richtet immer größere Schaden an
supimol kumying – shutterstock.com Ungeachtet vereinzelter Fahndungserfolge internationaler Sicherheitsbehörden erwirtschaften Cyberkriminelle von Jahr zu Jahr steigende Gewinne. Nach einer Analyse...
View ArticleRoyal Mail untersucht Datenleck
width="1878" height="1056" sizes="(max-width: 1878px) 100vw, 1878px">Der britische Postdienst Royal Mail untersucht Hinweise auf ein Datenleck. Hintergrund könnte der gleiche wie bei dem Fall von...
View ArticleTrump fires NSA and Cybercom chief, jeopardizing cyber intel
US President Donald Trump has summarily fired Gen. Timothy D. Haugh, head of the US National Security Agency (NSA) and US Cyber Command (Cybercom), along with Haugh’s civilian deputy, Wendy Noble. The...
View ArticleBig hole in big data: Critical deserialization bug in Apache Parquet allows RCE
A flaw in code for handling Parquet, Apache’s open-source columnar data file format, allows attackers to run arbitrary code on vulnerable instances. The vulnerability, tracked as CVE-2025-30065, is a...
View ArticleRoyal Mail investigates data leak
There are indications that Royal Mail has suffered a new cyber incident, around two years after it suffered a massive ransomware attack: A hacker called “GHNA” claimed in a darknet forum that he had...
View ArticleIvanti warns customers of new critical flaw exploited in the wild
Ivanti is warning customers that a critical vulnerability that impacts its VPN appliances and other products has already been exploited in the wild by a Chinese APT group. The flaw was originally...
View Article