Sicherheitsinfos

Wichtige SicherheitsinformationenHier veröffentlichen wir Sicherheitsinfos und Updateinformationen für Sie.

Da wir täglich in den tiefen des WWW unterwegs sind, finden wir oftmals wichtige Informationen rund um das Thema Sicherheit und bieten Ihnen so die Möglichkeiten, gewissen Gefahren auszuweichen und/oder zu beseitigen.

Leider ist es im Computeralltag so, dass immer gewisse Kreise mehr Informationen über Sie erhalten wollen, als Sie preisgeben wollen. Wir hoffen, Ihnen dadurch bei der Sicherheit Ihrer Systeme behilflich zu sein.
threatpost.comThe NSA released new guidance providing system administrators with the tools to update outdated TLS protocols....

threatpost.comCriminals are using the end of the Trump presidency to deliver a new remote-access trojan (RAT) variant disguised as a sex video of the outgoing POTUS, researchers report....

threatpost.comReport outlines deep cybersecurity challenges for the public/private seagoing sector....

securitymagazine.comCrime statistics from 2020 show an increase in homicides and violent crimes throughout the U.S. in 2020. Many point to the COVID-19 pandemic as part of the reason for the increase....

threatpost.comMore than 100,000 Zyxel networking products could be vulnerable to a hardcoded credential vulnerability (CVE-2020-29583) potentially allowing cybercriminal device takeover....

Heise Sicherheits NewsDer reguläre Firefox, das Extended Support Release (ESR) und auch die Android-Version des beliebten Webbrowsers haben ein wichtiges Sicherheitsupdate erhalten....

Heise Sicherheits NewsAngreifer könnten TextMaker-Nutzer attackieren. Die Gefahrenstufe gilt als hoch....

Heise Sicherheits NewsIn PhantomPDF für Windows klafften mehrere Lücken. Ein Update auf Version 9.7.5 schafft Abhilfe....

threatpost.comThe widespread compromise affecting key government agencies is ongoing, according to the U.S. government....

securitymagazine.comWith enhanced guest safety and the reducing of operational costs at the forefront of many hotelier's minds, Hilton Surfer's Paradise Hotel & Residences initiated a security access upgrade....

securitymagazine.comThe National Security Agency released a cybersecurity product detailing how to detect and fix out-of-date encryption protocol implementations. Networks and systems that use deprecated forms of Transport Layer Security (TLS) or Secure Sockets Layer (SSL) for traffic sessions are at risk of sensitive data exposure and decryption....

TheHackersNewsCybesecurity researchers today revealed a new malspam campaign that distributes a remote access Trojan (RAT) by purporting to contain a sex scandal video of U.S. President Donald Trump. The emails, which carry with the subject line "GOOD LOAN OFFER!!," come attached with a Java archive (JAR) file called "TRUMP_SEX_SCANDAL_VIDEO.jar," which, when downloaded, installs Qua or Quaverse RAT (QRAT)...

Heise Sicherheits NewsPro-Tipp: Spracherkennung ist ein nettes Spielzeug....

Heise Sicherheits NewsKommen auf Webservern veraltetet Verschlüsselungsprotokolle zum Einsatz, könnten Angreifer beispielsweise Bank-Daten mitschneiden. Das will die NSA verhindern....

Heise Sicherheits NewsMit einem Sicherheitsupdate haben die Dovecot-Entwickler eine Lücke geschlossen....

Heise Sicherheits NewsNutzer von Telegram können sehen, wie weit Chatpartner entfernt sind. Mittels Triangulation lässt sich der Standort allerdings deutlich genauer bestimmen....

TheHackersNewsThe U.S. government on Tuesday formally pointed fingers at the Russian government for orchestrating the massive SolarWinds supply chain attack that came to light early last month. "This work indicates that an Advanced Persistent Threat (APT) actor, likely Russian in origin, is responsible for most or all of the recently discovered, ongoing cyber compromises of both government and...

Heise Sicherheits NewsAuch Vertreter mehrerer US-Geheimdienste und -Sicherheitsbehörden zeigen im Zusammenhang mit der massiven Attacke mittels SolarWinds nun Richtung Moskau....

securitymagazine.comMichael Oberlaender has had cybersecurity leadership positions and CSO/CISO titles at enterprises around the world. He’s recovered companies from data breaches, built cyber-hardening strategies and policies, implemented cybersecurity budgets, forged relationships and communications with the C-suite, analyzed risks, and dealt with privacy laws around the world....

TheHackersNewsA three-year-old attack technique to bypass Google's audio reCAPTCHA by using its own Speech-to-Text API has been found to still work with 97% accuracy. Researcher Nikolai Tschacher disclosed his findings in a proof-of-concept (PoC) of the attack on January 2. "The idea of the attack is very simple: You grab the MP3 file of the audio reCAPTCHA and you submit it to Google's own speech-to-text API...

Weiter