Cyber Threat News Feed (Global)

on January 24, 2025 at 2:02 pm

Ein gutes Verhältnis zwischen CISO und Vorstand hat viele Vorteile. Golden Dayz – Shutterstock.com In den vergangenen Jahren haben sich CISOs […]

on January 24, 2025 at 12:17 pm

A critical bug in SonicWall’s remote access gateway, Secure Mobile Access (SMA1000), is likely being used in zero-day attacks, allowing remote code […]

on January 24, 2025 at 7:10 am

Die Ransomware-Bande Ransomhub will 100 Gigabyte Daten von der Grohe AG erbeutet haben.CeltStudio – Shutterstock.com Die Grohe AG zählt zu den […]

on January 24, 2025 at 6:00 am

Longtime cybersecurity practitioners might recall the early guidance manuals published by the National Security Agency (NSA) in the 1980s and 1990s […]

on January 24, 2025 at 5:30 am

Corporation violations of GDPR rules resulted in total fines of €1.2 billion in 2024, according to a report from international law firm DLA Piper. […]

on January 24, 2025 at 4:00 am

Ein lückenloser Grundschutz ist im Kampf gegen Ransomware die halbe Miete.ImageFlow – Shutterstock.com Seit ihrem ersten Auftreten im Jahr 2022 […]

on January 24, 2025 at 1:16 am

AMD has had to confirm the existence of a major cybersecurity problem in its chip microcode before it can post a fix. Microcode often loads […]

on January 23, 2025 at 11:51 pm

Network administrators with Fortinet’s FortiGate next generation firewall in their IT environments are being warned to thoroughly scrutinize […]

on January 23, 2025 at 10:45 pm

Researchers have discovered that next-generation firewalls from Palo Alto Networks contain years-old known vulnerabilities in their UEFI firmware — […]

on January 23, 2025 at 3:19 pm

Beset with cybersecurity risks, compliance regimes, and digital experience challenges, enterprises need to move toward autonomous endpoint management […]

on January 23, 2025 at 11:39 am

Cisco has patched a denial-of-service (DoS) vulnerability affecting its open-source antivirus software toolkit, ClamAV, which already has a […]

on January 23, 2025 at 7:00 am

Little in the modern IT world lends itself to manual or siloed management, and this is doubly true in the security realm. The scale of modern […]

on January 23, 2025 at 6:15 am

The administrators of the Python Package Index (PyPI) have begun an effort to improve the hundreds of thousands of software packages that are listed. […]

on January 23, 2025 at 4:00 am

Die Mär von der Cybercrime-KI-Revolution?Overearth | shutterstock.com Cybersicherheitsexperten haben in den letzten Jahren immer wieder darauf […]

on January 23, 2025 at 4:00 am

Sind IT-Mitarbeiter unzufrieden, kann das an schlechten Führungskräften oder an einer unzureichenden IT-Strategie liegen. Foto: fizkes – […]

on January 23, 2025 at 2:41 am

Due to a Domain Name System (DNS) setting error, which the security researcher who discovered it said was almost certainly a cut-and-paste problem, […]

on January 22, 2025 at 6:14 pm

The administration of US President Donald Trump has dismissed all members of its Cyber Safety Review Board (CSRB), including those investigating the […]

on January 22, 2025 at 5:30 pm

As threat actors and security teams harness the growing potential of artificial intelligence (AI), who will prevail? From generative AI (GenAI) to […]

by BrianKrebs on January 22, 2025 at 3:24 pm

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert […]

on January 22, 2025 at 2:34 pm

Bei einer Cyberattacke auf einen IT-Dienstleister wurden mehrere Schulserver verschlüsselt.Elena Uve – Shutterstock.com Die Kreisverwaltung […]

on January 22, 2025 at 11:48 am

Halloween 2024 made history with a massive spike in distributed denial of service (DDoS) attacks, with one particular assault reaching over 5 […]

by BrianKrebs on January 16, 2025 at 9:18 pm

Residents across the United States are being inundated with text messages purporting to come from toll road operators like E-ZPass, warning that […]

by BrianKrebs on January 14, 2025 at 10:50 pm

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three "zero-day" […]

by BrianKrebs on January 7, 2025 at 11:41 pm

Besieged by scammers seeking to phish user accounts over the telephone, Apple and Google frequently caution that they will never reach out unbidden […]

by BrianKrebs on December 31, 2024 at 4:05 am

Federal authorities have arrested and indicted a 20-year-old U.S. Army soldier on suspicion of being Kiberphant0m, a cybercriminal who has been […]

by BrianKrebs on December 29, 2024 at 11:48 pm

KrebsOnSecurity.com turns 15 years old today! Maybe it's indelicate to celebrate the birthday of a cybercrime blog that mostly publishes bad news, […]

by BrianKrebs on December 19, 2024 at 5:07 pm

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix, a powerful commercial web […]

by BrianKrebs on December 18, 2024 at 1:17 pm

Adam Griffin is still in disbelief over how quickly he was robbed of nearly $500,000 in cryptocurrencies. A scammer called using a real Google phone […]

by BrianKrebs on December 11, 2024 at 9:38 pm

A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking […]

by BrianKrebs on December 11, 2024 at 1:53 am

Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already […]

by Nate Nelson on August 31, 2022 at 12:57 pm

2.5 million people were affected, in a breach that could spell more trouble down the line.

by Nate Nelson on August 30, 2022 at 4:00 pm

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.

by Nate Nelson on August 29, 2022 at 2:56 pm

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.

by Nate Nelson on August 26, 2022 at 4:44 pm

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group.

by Nate Nelson on August 25, 2022 at 6:47 pm

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.

by Threatpost on August 24, 2022 at 2:17 pm

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount […]

by Threatpost on August 23, 2022 at 1:19 pm

CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP.

by Nate Nelson on August 22, 2022 at 1:59 pm

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.

by Elizabeth Montalbano on August 19, 2022 at 3:25 pm

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under […]

by Elizabeth Montalbano on August 18, 2022 at 2:31 pm

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.