Sicherheitsinfos

Wichtige SicherheitsinformationenHier veröffentlichen wir Sicherheitsinfos und Updateinformationen für Sie.

Da wir täglich in den tiefen des WWW unterwegs sind, finden wir oftmals wichtige Informationen rund um das Thema Sicherheit und bieten Ihnen so die Möglichkeiten, gewissen Gefahren auszuweichen und/oder zu beseitigen.

Leider ist es im Computeralltag so, dass immer gewisse Kreise mehr Informationen über Sie erhalten wollen, als Sie preisgeben wollen. Wir hoffen, Ihnen dadurch bei der Sicherheit Ihrer Systeme behilflich zu sein.
TheHackersNewsAn unpatched security weakness in Google Drive could be exploited by malware attackers to distribute malicious files disguised as legitimate documents or images, enabling bad actors to perform spear-phishing attacks comparatively with a high success rate. The latest security issue—of which Google is aware but, unfortunately, left unpatched—resides in the "manage versions" functionality...

threatpost.comThe university said that it paid $457,000 to retrieve a decryption key after a ransomware attack encrypted student and faculty data on its servers....

Heise Sicherheits NewsDie Schulplattform des Bayerischen Kultusministeriums wies unter anderem eine XSS-Lücke auf, die Betreiber interessierten sich aber nicht für Hinweise....

Heise Sicherheits NewsWer für IT-Sicherheit und Datenschutz zuständig ist, wird oft als "Spaßbremse" wahrgenommen. Auf dem Cyber Security Tech Summit in Bonn will man das ändern....

threatpost.comMalicious Community Amazon Machine Images are a ripe target for hackers, say researchers....

threatpost.comThreatpost editors discuss a cryptomining malware targeting AWS systems, a recent development in a lawsuit against the IBM-owned Weather Channel app, and more....

TheHackersNewsJenkins—a popular open-source automation server software—published an advisory on Monday concerning a critical vulnerability in the Jetty web server that could result in memory corruption and cause confidential information to be disclosed. Tracked as CVE-2019-17638, the flaw has a CVSS rating of 9.4 and impacts Eclipse Jetty versions 9.4.27.v20200227 to 9.4.29.v20200521—a full-featured tool...

Heise Sicherheits NewsDie US-Justiz erhebt Anklage gegen Ubers ehemaligen Sicherheitschef. Er soll den 2017 bekannt gewordenen Hack von Millionen Kundendaten vertuscht haben....

threatpost.comJoseph Sullivan allegedly paid off $100K to the hackers responsible for a 2016 data breach, which exposed PII of 57 million passengers and drivers....

Heise Sicherheits NewsWer Links benutzt, um Mails zu versenden, sollte deren Inhalt zuvor genau kontrollieren....

Heise Sicherheits NewsAngreifer könnten unter anderem Cisco vWAAS, Smart Software Manager und Video Surveillance 8000 Series attackieren....

Heise Sicherheits NewsGoogle hat serverseitig eine Sicherheitslücke beseitigt: Angreifer hätten sich wirkungsvoll als andere Gmail- beziehungsweise G Suite-Nutzer ausgeben können....

Heise Sicherheits NewsÜber eine Lücke in der Forensoftware vBulletin kopierten Angreifer Daten. Das Elster-Onlinefinanzamt ("Mein Elster") war hiervon ausdrücklich nicht betroffen....

Heise Sicherheits NewsIn dem dreitägigen Onlinekurs entwickeln die Teilnehmer einen eigenen Leitfaden, wie ihr Unternehmen die Cloud sicher nutzen kann. Bis 28.8. gibt es 10% Rabatt....

securitymagazine.comThe U.S. Department of State’s Rewards for Justice (RFJ) program, which is administered by the Diplomatic Security Service, is offering a reward of up to $10 million for information leading to the identification or location of any person who works with or for a foreign government for the purpose of interfering with U.S. elections through certain illegal cyber activities....

securitymagazine.comChicago, Ill. Mayor Lori E. Lightfoot and Chicago Police Department (CPD) Superintendent David O. Brown announced the expansion of the Neighborhood Policing Initiative to the 9th (Deering), 10th (Ogden) and 11th (Harrison) District. As part of the expanded initiative, each district will rollout new District Coordination Officers (DCOs) this fall, who will work directly with community members to resolve public safety issues through collaboration and remedy neighborhood issues with the help of beat officers, detectives, aldermen, area businesses and sister agencies. To ensure DCOs are fully integrated in the neighborhoods they serve, the Department is also launching a new community-immersion training program, completing one of Mayor Lightfoot’s 90-day reforms announced in early June.  ...

securitymagazine.comThe Transportation Security Administration (TSA) announced the new members of the Aviation Security Advisory Committee (ASAC), which includes the appointment of four new members, the reappointment of 15 members, and the full list of other committee members serving their term....

securitymagazine.comWe speak to Saad Gul, Co-Chair of the Poyner Spruill, LLP, privacy and cybersecurity team, and learn about the Lifespan HHS investigation, what it means for data security professionals and why the HSS ruling should be a warning to all companies with HIPPA information. ...

securitymagazine.comAs many employees transfer back to a more traditional business setting from remote work environments, adjustments to cybersecurity protocols are going to be necessary. Organizations will need to evaluate any temporary provisions that were put into place during the COVID-19 pandemic, including any shortcuts that were taken and processes that were circumvented, and whether such protocols should be reversed or enhanced....

securitymagazine.comDuring an emergency special meeting, members of the Detroit Federation of Teachers (DFT) voted to authorize a potential safety strike aimed at pressing the Detroit, Mich. Public Schools Community District to implement basic science-based safety protocols before schools reopen during the continuing coronavirus pandemic. ...

Weiter