A high-volume phishing campaign delivering the long-running Phorpiex malware has been observed using emails with the subject line “Your Document,” a lure widely seen throughout 2024 and 2025. The messages include an attachment that appears to be a harmless document… Read More "Phorpiex Phishing Delivers Low-Noise Global Group Ransomware"
Technologie mit strategischen Prioritäten verknüpfen Um in der Vorstandsetage glaubwürdig zu sein, müssen CISOs ihre geplanten Ausgaben anhand der Unternehmenszielsetzung definieren. Der Vorstand konzentriert sich auf Prioritäten wie neue Märkte zu erschließen, die Margen zu verbessern, die Widerstandsfähigkeit zu steigern… Read More "So rechtfertigen Sie Ihre Security-Investitionen"
A new set of security principles aimed at protecting operational technology (OT) environments has been released by the US Cybersecurity and Infrastructure Security Agency (CISA), the United Kingdom’s National Cyber Security Centre (NCSC) and the Federal Bureau of Investigation (FBI),… Read More "Global Agencies Release New Guidance to Secure Industrial Networks"
Diese Open-Source-Tools adressieren spezifische Security-Probleme – mit minimalem Footprint. Foto: N Universe | shutterstock.com Cybersicherheitsexperten verlassen sich in diversen Bereichen auf Open-Source-Lösungen – nicht zuletzt weil diese im Regelfall von einer lebendigen und nutzwertigen Community gestützt werden. Aber auch weil… Read More "9 unverzichtbare Open-Source-Security-Tools"
An active, coordinated exploitation campaign conducted by a botnet has been identified by Check Point Research which is targeting a critical vulnerability affecting HPE OneView. The activity has been attributed to the Linux-based RondoDox botnet and Check Point warned the… Read More "RondoDox Botnet Targets HPE OneView Vulnerability in Exploitation Wave"
Cyber threat actors went all in on credential theft in 2025, with eSentire reporting a 389% year-over-year rise in account compromise, making up 55% of all attacks observed by the cybersecurity firm. The firm’s 2025 Year in Review & 2026… Read More "Account Compromise Surged 389% in 2025, Says eSentire"
A long-running malvertising campaign is dropping backdoor malware onto the networks of organizations around the world through trojanized PDF documents. Dubbed TamperedChef, the malvertising campaign has previously been identified, but researchers at Sophos have detailed how targeting has become widespread… Read More "TamperedChef Malvertising Campaign Drops Malware via Fake PDF Manuals"
What Steaelite includes The browser-based Steaelite toolkit includes modules for remote code execution, file management, live streaming, webcam and microphone access, process management, clipboard monitoring, password recovery, installed program enumeration, location tracking, arbitrary file execution, URL opening, DDoS attacks, and… Read More "Steaelite RAT combines data theft and ransomware management capability in one tool"
Security researchers have detailed how they discovered and exploited a cross‑site scripting (XSS) vulnerability in a popular infostealer, allowing them to gather crucial evidence about its back-end operations. Ari Novick, a malware researcher at identity security specialist CyberArk, explained in… Read More "Researchers Exploit Bug in StealC Infostealer to Collect Evidence"
Shift toward control plane targets The coordinated disclosures from Talos, Cisco, and the government agencies highlight an ongoing shift in attacker priorities. Rather than targeting only endpoints or user-facing applications, sophisticated groups are increasingly pursuing control-plane technologies such as SD-WAN,… Read More "Five Eyes issue emergency directive on exploited Cisco SD-WAN zero-day"
