Einen weiteren blinden Fleck in Sachen Cloud Security sieht Roy während Fusionen und Übernahmen. Er mahnt Unternehmen dazu, in solchen Fällen proaktiv vorzugehen: “Führen Sie eine Due Diligence durch, berücksichtigen Sie diese auch und stellen Sie sicher, dass Sie den… Read More "Was bei der Cloud-Konfiguration schiefläuft – und wie es besser geht"
UK organizations have been encouraged to immediately patch a critical new vulnerability in F5’s BIG-IP Access Policy Manager (APM) product currently under active exploitation. The National Cyber Security Centre (NCSC) explained that it is still “working to fully understand UK impact… Read More "NCSC Urges Immediate Patching of F5 BIG-IP Bug"
Breaches of employee data reported to the UK regulator have hit their highest level in at least seven years, according to new analysis from law firm Nockolds. The company said that reports to the Information Commissioner’s Office (ICO) had increased… Read More "Employee Data Breaches Surge to Seven-Year High"
Researchers have observed a “dangerous convergence” between supply chain attackers and extortion gangs like Lapsus$ as TeamPCP looks to exploit stolen credentials. In a new report published on March 30, security researchers at Wiz, now part of Google Cloud, said… Read More "TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets"
A security vulnerability in ChatGPT executed with a single malicious prompt could be exploited to covertly exfiltrate sensitive data from prompts and messages. The security issue, which enabled data exfiltration and remote code execution, was discovered by cybersecurity researchers at… Read More "ChatGPT Security Issue Enabled Data Theft via Single Prompt"
Congress is set to take up the reauthorization of a divisive program that lets U.S. spy agencies pore over foreigners’ calls, texts and emails, with supporters like President Donald Trump saying it has saved lives while critics point to longstanding… Read More "Trump Urges Extending Foreign Surveillance Program as Some Lawmakers Push for US Privacy Protections"
A Birmingham-based provider of monitored alarms has been fined £100,000 ($132,000) by the Information Commissioner’s Office (ICO) after staff used false identities on marketing sales calls. TMAC made over 260,000 nuisance calls to numbers registered on the Telephone Preference Service… Read More "ICO Fines UK Nuisance Call Scammers £100,000"
Researchers at Huntress have uncovered a sophisticated threat hidden within what appeared to be adware, revealing that a single unregistered domain available for as little as $10 could have granted malicious actors silent control over more than 25,000 compromised endpoints… Read More "$10 Domain Could Have Handed Hackers 25k Endpoints, Including in OT and Gov Networks"
“This exposes 12 MCP tools, including config writes with automatic nginx reload, to any host on the network. One unauthenticated API call is all it takes to inject a config and take over nginx,” said Pluto Security. Leveraging MCPwn, an… Read More "Critical nginx UI tool vulnerability opens web servers to full compromise"
A critical vulnerability in Citrix’s networking and security solutions is being exploited in the wild, security researchers have confirmed. The vulnerability, disclosed by Citrix as CVE-2026-3055 on March 23, is a critical out-of-bounds read in NetScaler Application Delivery Controller (ADC)… Read More "Critical Citrix NetScaler Vulnerability Exploited in the Wild"
