Sicherheitsinfos

Wichtige SicherheitsinformationenHier veröffentlichen wir Sicherheitsinfos und Updateinformationen für Sie.

Da wir täglich in den tiefen des WWW unterwegs sind, finden wir oftmals wichtige Informationen rund um das Thema Sicherheit und bieten Ihnen so die Möglichkeiten, gewissen Gefahren auszuweichen und/oder zu beseitigen.

Leider ist es im Computeralltag so, dass immer gewisse Kreise mehr Informationen über Sie erhalten wollen, als Sie preisgeben wollen. Wir hoffen, Ihnen dadurch bei der Sicherheit Ihrer Systeme behilflich zu sein.
threatpost.comJoseph Carson, chief security scientist at Thycotic, discusses the death of data privacy and what comes next....

TheHackersNewsAcademics from Vrije University in Amsterdam and ETH Zurich have published a new research paper describing yet another variation of the Rowhammer attack. Dubbed SMASH (Synchronized MAny-Sided Hammering), the technique can be used to successfully trigger the attack from JavaScript on modern DDR4 RAM cards, notwithstanding extensive mitigations that have been put in place by manufacturers over the...

threatpost.comSearch-engine optimization (SEO) tactics direct users searching for common business forms such as invoices, receipts or other templates to hacker-controlled Google-hosted domains....

Heise Sicherheits NewsÜber das Einladungssystem beim Spiel "Counter-Strike: GO" kann Code auf fremde Rechner geschleust werden. Valve hat den Fehler nach zwei Jahren nicht behoben....

securitymagazine.comThe city of Eilat, Israel has implemented viisights' behavioral recognition system to detect, predict and analyze events of interests in real-time and alert authorities of crowding, violent/suspicious activity, traffic or crowd congestion, and more....

securitymagazine.comHarbor East, a mixed-use community in Maryland, has installed turnstiles in several buildings over the years to provide safety and security to residents, visitors and employees....

Heise Sicherheits NewsEin Update für die Desktop-Ausgaben von Googles Chrome-Browser schließt zwei Schwachstellen mit "High"-Einstufung, für die Exploit-Code verfügbar ist....

securitymagazine.comA 2020 Most Influential in Security, Michael Matranga announced the launch of M6 Global, a team of the nation’s top security and emotional intelligence experts, to provide holistic plans for safe communities and workplaces....

Heise Sicherheits NewsUnzureichend verwaltete Open-Source-Komponenten stellen in kommerziellen Anwendungen ein großes Risiko dar – das die meisten Anbieter betrifft....

threatpost.comMicrosoft fixes 110 vulnerabilities, with 19 classified as critical and another flaw under active attack....

TheHackersNewsOne of the biggest consequences of the rapidly evolving cybersecurity threat landscape is that defenses must constantly build bigger systems to defend themselves.  This leads to both more complex systems and often less communication between them. More importantly, it can lead companies to invest in disparate “best in class” components instead of finding the best fit for their needs. The constant...

Heise Sicherheits NewsNeben SAP Commerce versorgte SAP unter anderem NetWeaver Master Data Management, Solution Manager, NetWeaver und SAPSetup mit frischen Security-Updates....

Heise Sicherheits NewsAus Adobe Photoshop, Digital Editions & Bridge (Windows, macOS) wurden kritische Sicherheitslücken entfernt. Auch RoboHelp für Win bekam ein wichtiges Update....

TheHackersNewsGoogle on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with patches for two newly discovered security vulnerabilities for both of which it says exploits exist in the wild, allowing attackers to engage in active exploitation. One of the two flaws concerns an insufficient validation of untrusted input in its V8 JavaScript rendering engine (...

Heise Sicherheits NewsZum Patchday hat Microsoft unter anderem eine Schwachstelle im Desktop Window Manager in Win 10 & Server-Pendants behoben, die derzeit aktiv ausgenutzt wird....

Heise Sicherheits NewsEine Schwachstelle im System ließ Angreifer Bewegungsprofile auslesen. Die Lücke soll bereits geschlossen sein, doch der CCC fordert ein Moratorium für die App....

Heise Sicherheits NewsCorona-Lockdown, Patch-Desaster und neue, gesetzliche Vorgaben – die rein redaktionelle Eintages-Konferenz vermittelt wertvolles Wissen für die Security-Praxis....

securitymagazine.comIn recent years, there has been a recognition that social engineering plays a huge part in the execution of cybersecurity attacks. The intersection of “non-physical” and “technical” social engineering is where criminals are mostly focused today. Enter deepfake technology, which poses a looming risk over enterprises and their security leaders as they figure out how to prepare for and mitigate such a risk....

securitymagazine.comSince Digital Shadows published its first report last year, Initial Access Brokers: An Excess of Access, the company has continued to closely monitor the IAB criminal category. Where it tracked roughly 500 IAB listings in all of 2020, already in 2021 it has found some 200 new listings published by IABs in cybercriminal forums and other dark web sources in just Q1....

securitymagazine.comCybercriminals continue to exploit unpatched Microsoft Exchange servers. Cybersecurity researchers at Sophos report an unknown attacked has been attempting to leverage the ProxyLogon exploit to unload malicious Monero cryptominer onto Exchange servers, with the payload being hosted on a compromised Exchange server. ...