Posted by Chrome Root Program, Chrome Security Team Note: Google Chrome communicated its removal of default trust of Chunghwa Telecom and Netlock in the public forum on May 30, 2025. The Chrome Root Program Policy states that Certification Authority (CA)… Read More "Google Online Security Blog: Sustaining Digital Certificate Security"
Schritt-für-Schritt zur passwortlosen Umgebung Accenture hat beispielsweise die letzten fünf Jahre damit verbracht, sich von Passwörtern zu verabschieden und sich für Microsoft Hello for Business entschieden. Zunächst entwickelte das Team eine Adoptionskarte, in der die grundlegenden Schritte zur Identifizierung passwortloser… Read More "Passwortlose Authentifizierung wird für CISOs immer wichtiger"
In a new report, application security provider OX urged the US Cybersecurity and Infrastructure Security Agency (CISA) to add more context to its Known Exploited Vulnerabilities (KEV) catalog. After analyzing 10 common vulnerabilities (CVEs) in CISA’s KEV list across over… Read More "CISA Urged to Enrich KEV Catalog with More Contextual Data"
A new malware campaign is distributing a novel Rust-based information stealer dubbed EDDIESTEALER using the popular ClickFix social engineering tactic initiated via fake CAPTCHA verification pages. “This campaign leverages deceptive CAPTCHA verification pages that trick users into executing a malicious… Read More "New EDDIESTEALER Malware Bypasses Chrome’s App-Bound Encryption to Steal Browser Data"
Russische Hacker ändern ihre Taktik von Passwort-Spraying zu Phishing, aber ihre Ziele innerhalb der NATO bleiben gleich. PX Media – Shutterstock.com Seit über einem Jahr hat es eine neue Cyberspionage-Gruppe, die mit der russischen Regierung in Verbindung stehen soll, auf… Read More "Void Blizzard nimmt NATO-Organisationen ins Visier"
New ransomware payment reporting rules have come into effect in Australia from today (May 30), applying to all organizations with an annual turnover of AUS $3m ($1.93M). The provisions, outlined in Australia’s Cyber Security Act 2024, also apply to private… Read More "Mandatory Ransomware Payment Disclosure Begins in Australia"
Several cybersecurity researchers who have tracked Trickbot extensively tell WIRED they were unaware of the announcement. An anonymous account on the social media platform X recently claimed that Kovalev used the Stern handle and published alleged details about him. WIRED… Read More "Cops in Germany Claim They’ve ID’d the Mysterious Trickbot Ransomware Kingpin"
Breaking Out of the Security Mosh Pit When Jason Elrod, CISO of MultiCare Health System, describes legacy healthcare IT environments, he doesn’t mince words: “Healthcare loves to walk backwards into the future. And this is how we got here, because… Read More "A Healthcare CISO’s Journey to Enabling Modern Care"
GreyNoise said its in-house AI tool, SIFT, flagged suspicious traffic aimed at disabling and exploiting a TrendMicro-powered security feature, AiProtection, enabled by default on Asus routers. Trojanizing the safety net Asus’ AiProtection, developed with TrendMicro, is a built-in, enterprise-grade security… Read More "New botnet hijacks AI-powered security tool on Asus routers"
The US banking industry is lobbying to rescind one of the US Securities and Exchange Commission’s (SEC) latest rules on cyber incident reporting. The group includes the American Bankers Association (ABA), the Bank Policy Institute (BPI), the Securities Industry and… Read More "US Banks Urge SEC to Repeal Cyber Disclosure Rule"
