Sicherheitsinfos

Wichtige SicherheitsinformationenHier veröffentlichen wir Sicherheitsinfos und Updateinformationen für Sie.

Da wir täglich in den tiefen des WWW unterwegs sind, finden wir oftmals wichtige Informationen rund um das Thema Sicherheit und bieten Ihnen so die Möglichkeiten, gewissen Gefahren auszuweichen und/oder zu beseitigen.

Leider ist es im Computeralltag so, dass immer gewisse Kreise mehr Informationen über Sie erhalten wollen, als Sie preisgeben wollen. Wir hoffen, Ihnen dadurch bei der Sicherheit Ihrer Systeme behilflich zu sein.
Heise Sicherheits NewsEin Update schließt teils als kritisch eingestufte Einfallstore in Ciscos Jabber-Client für Win, macOS, Android & iOS. Auch weitere Produkte erhielten Updates....

Heise Sicherheits NewsSchwache Kryptografie und reichlich Sicherheitslücken haben zum Ende von TLS 1.0 und 1.1 geführt....

TheHackersNewsFacebook may be banned in China, but the company on Wednesday said it has disrupted a network of bad actors using its platform to target the Uyghur community and lure them into downloading malicious software that would allow surveillance of their devices. "They targeted activists, journalists and dissidents predominantly among Uyghurs from Xinjiang in China primarily living abroad in Turkey,...

Heise Sicherheits News"Earth Empusa" und "Evil Eye" haben die muslimische Minderheit angegriffen. Uiguren im Ausland wurden mit gefälschten Konten, Websites und Apps getäuscht....

TheHackersNewsPurple Fox, a Windows malware previously known for infecting machines by using exploit kits and phishing emails, has now added a new technique to its arsenal that gives it worm-like propagation capabilities. The ongoing campaign makes use of a "novel spreading technique via indiscriminate port scanning and exploitation of exposed SMB services with weak passwords and hashes," according to ...

TheHackersNewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of critical security shortcomings in GE's Universal Relay (UR) family of power management devices. "Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition," the agency said in an advisory...

Heise Sicherheits NewsMit der Übernahme des Startups Mesh7 erweitert VMware den Umfang seiner Kubernetes-Plattform Tanzu um mehr API-Sicherheit im Service Mesh....

TheHackersNewsGoogle has disclosed that a now-patched vulnerability affecting Android devices that use Qualcomm chipsets is being weaponized by attackers to launch targeted attacks. Tracked as CVE-2020-11261 (CVSS score 8.4), the flaw concerns an "improper input validation" issue in Qualcomm's Graphics component that could be exploited to trigger memory corruption when an attacker-engineered app requests...

securitymagazine.comIf security forces are going to perform more functions, which they should...they need additional training. More training for your security teams is an expensive proposition, but an all-important one. ...

securitymagazine.comBusiness resilience programs may not generate revenue for organizations, but will most certainly create awareness, change a responsiveness culture into a preparedness culture, cut expenditure, save time and minimize reputational impact – not if, but when improbable circumstances become reality....

securitymagazine.comWhile password spraying results in the infiltration of many accounts every year, it’s also one of the easiest attacks for cyber-aware employees to thwart. In other words, password spraying needs to be a top consideration for any successful cybersecurity platform....

threatpost.comThe flaws could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition....

threatpost.comRemote ed software bugs give attackers wide access student computers, data....

Heise Sicherheits NewsSicherheitsexperten entdecken Befehle, mit denen sich das Verhalten von Intel-Prozessoren ändern lässt – bisher jedoch nur in einem speziellen Debugging-Modus....

threatpost.comAttackers can leverage the critical Adobe ColdFusion flaw to launch arbitrary code execution attacks....

Heise Sicherheits NewsJetzt updaten: Wichtige ColdFusion-Aktualisierungen für mehrere Versionen und alle Plattformen schließen eine als kritisch eingestufte Sicherheitslücke....

TheHackersNewsCybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers. "These findings allow for elevation of privileges and ultimately remote code execution which could be used by a malicious attacker within the same network to gain...

Heise Sicherheits NewsDie Entwickler des Moduls "Fast Autocomplete" für das CMS Drupal (8.x und 9.x) haben eine als "Moderately Critical" eingestufte Schwachstelle gefixt....

securitymagazine.com Transportation Security Administration (TSA) law enforcement and police departments from Connecticut, and New York recently partnered with the Connecticut State Police (CSP) to assess their ability to hunt and stop unauthorized drones from interfering with commercial aviation....

securitymagazine.comMitel appoints Arvind Raman as Chief Information Security Officer....

Weiter