Sicherheitsinfos

Wichtige SicherheitsinformationenHier veröffentlichen wir Sicherheitsinfos und Updateinformationen für Sie.

Da wir täglich in den tiefen des WWW unterwegs sind, finden wir oftmals wichtige Informationen rund um das Thema Sicherheit und bieten Ihnen so die Möglichkeiten, gewissen Gefahren auszuweichen und/oder zu beseitigen.

Leider ist es im Computeralltag so, dass immer gewisse Kreise mehr Informationen über Sie erhalten wollen, als Sie preisgeben wollen. Wir hoffen, Ihnen dadurch bei der Sicherheit Ihrer Systeme behilflich zu sein.
Heise Sicherheits NewsDer Webbrowser Chrome ist in einer abgesicherten Version für Linux, macOS und Windows erschienen....

Heise Sicherheits NewsAngreifer könnten Geräte mit Dnsmasq attackieren und Opfer auf Malware-Websites umleiten. Davon sind unter anderem Asus, Cisco und Xiaomi betroffen....

securitymagazine.comWe talk to Alan Duric, co-founder and CTO/COO of Wire, a secure collaboration platform, about the various threats facing enterprises today, as well as how organizations can protect their employees and assets, and why organizations (and vendors) need to make a fundamental change to how they operate by implementing better security, technology, and approaches to build a security-first infrastructure....

securitymagazine.comNoah Beddome will join Opendoor as Chief Information Security Officer (CISO). Beddome will be responsible for protecting the data and technology infrastructure that is core to Opendoor business. He will oversee Opendoor’s information security program and IT, and will help to maintain trust with customers by ensuring the integrity of data systems....

securitymagazine.comIowa Governor Kim Reynolds has appointed Paul Trombino as Director of the Iowa Department of Homeland Security and Emergency Management. Paul was serving as interim director of the Department of Administrative Services as well as the Governor’s Chief Operating Officer. His appointment is effective January 22, 2021. ...

securitymagazine.comSymantec's Threat Hunter Team, a group of security experts, have uncovered an additional piece of malware used in the SolarWinds attacks which was used against a select number of victims that were of interest to the attackers.  According to Symantec, the malware, Raindrop is a loader which delivers a payload of Cobalt Strike. Raindrop is very similar to the already documented Teardrop tool, but there are some key differences between the two....

securitymagazine.comRadware's new 2020-2021 State of Web Application Security Report revealed that global organizations are struggling to maintain consistent application security across multiple platforms, and they are also losing visibility with the emergence of new architectures and the adoption of Application Program Interfaces (APIs)....

securitymagazine.comAs we move past an unprecedented year of change, everyone is eager to see what 2021 has in store. For those in the security and surveillance space, of particular interest is how video content analytics might evolve to support emerging use cases. In that vein, Deep Learning and Predictive Analytics are among the key technologies that will continue to benefit video surveillance solutions development and adoption in 2021 - here's why. ...

threatpost.comSeven flaws in open-source software Dnsmasq could allow DNS cache poisoning attacks and remote code execution....

threatpost.comJoyce will replace Anne Neuberger, who is now deputy national security advisor for the incoming Biden administration....

threatpost.comThe post-compromise backdoor installs Cobalt Strike to help attackers more laterally through victim networks....

threatpost.comThe FreakOut malware is adding infected Linux devices to a botnet, in order to launch DDoS and cryptomining attacks....

TheHackersNewsCybersecurity researchers have unearthed a fourth new malware strain—designed to spread the malware onto other computers in victims' networks—which was deployed as part of the SolarWinds supply chain attack disclosed late last year. Dubbed "Raindrop" by Broadcom-owned Symantec, the malware joins the likes of other malicious implants such as Sunspot, Sunburst (or Solorigate), and Teardrop that...

threatpost.comUsers of the Linux-based open-source firmware—which include developers from commercial router companies--may be targeted by phishing campaigns, administrators warn....

securitymagazine.comThe 10th Allianz Risk Barometer 2021 survey reports potential disruption and loss scenarios companies are facing; this year's top three business risks all relate to the coronavirus pandemic: business interruption (#1 with 41% responses); pandemic outbreak (#2 with 40%) and cyber incidents (#3 with 40%)....

TheHackersNewsCybersecurity researchers have uncovered multiple vulnerabilities in Dnsmasq, a popular open-source software used for caching Domain Name System (DNS) responses, thereby potentially allowing an adversary to mount DNS cache poisoning attacks and remotely execute malicious code. The seven flaws, collectively called "DNSpooq" by Israeli research firm JSOF, echoes previously disclosed weaknesses in...

TheHackersNewsAn ongoing malware campaign has been found exploiting recently disclosed vulnerabilities in network-attached storage (NAS) devices running on Linux systems to co-opt the machines into an IRC botnet for launching distributed denial-of-service (DDoS) attacks and mining Monero cryptocurrency. The attacks deploy a new  malware variant called "FreakOut" by leveraging critical flaws fixed in Laminas...

Heise Sicherheits NewsDiagdsahfghgf3"hgjGgh=jh+/ma-meöèhghimmē... huch! Mooomēēnt! Stopp! Es gibt Patches....

Heise Sicherheits NewsAngreifer konnten auf Nutzerdaten des OpenWrt-Forums zugreifen. Dort tauschen sich Nutzer des alternativen Betriebssystems u.a. für Router aus....

TheHackersNewsCybersecurity is hard. For a CISO that faces the cyber threat landscape with a small security team, the challenge is compounded. Compared to CISOs at large enterprises, CISOs small to medium-sized enterprises (SMEs) have smaller teams with less expertise, smaller budgets for technology and outside services, and are more involved in day-to-day protection activities. CISOs at SMEs are...

Weiter