130 Unternehmen und Institutionen gerieten ins Visier der Hacker. Tayler Derden | shutterstock.com Nach jahrelangen Cybercrime-Angriffen auf mehr als Hundert Unternehmen und Einrichtungen in Deutschland haben Ermittler zwei zentrale Verdächtige identifiziert. Der eine sei der mutmaßliche Kopf von zwei Hackergruppen,… Read More "Fahndung nach Cyberkriminellen – 130 Firmen attackiert"
Cyber attackers continue to speed up vulnerability exploitation and last year 28.96% of known exploited vulnerabilities (KEVs) identified by VulnCheck were exploited before being publicly disclosed, or on the day they were reported. This from cybersecurity firm VulnCheck’s State of… Read More "Zero-Day Exploits Surge, 30% of Flaws Attacked Before Disclosure"
A security flaw in the RealHomes CRM plugin, bundled with a WordPress theme installed on more than 30,000 websites, has been patched after researchers found it could allow low-privileged users to upload malicious files and take control of affected sites.… Read More "RealHomes CRM Plugin Flaw Affected 30,000 WordPress Sites"
A software defect at Lloyds Banking Group exposed the personal data of up to 447,936 customers after an IT glitch allowed users to see other customers’ transactions and account information. The incident, which occurred on 12 March during an overnight… Read More "Lloyds IT Glitch Exposed Data of Nearly 500,000 Banking Customers"
A wave of tax-themed cyber campaigns delivering malware, remote access tools, fraud schemes and credential phishing has been detected in early 2026. Proofpoint researchers identified more than a hundred such operations, highlighting how attackers continue to exploit the pressures and expectations… Read More "Cybercriminals Exploit Tax Season With New Phishing Tactics"
The UK’s National Health Service (NHS) has outlined plans to proactively work with suppliers to improve cybersecurity resilience across the healthcare and social care system in an open letter issued on January 22. The move follows the voluntary cybersecurity supply… Read More "NHS Issues Open Letter Demanding Improved Cybersecurity Standards"
The flaw is described as “an improper neutralization of special elements” used in a SQL command vulnerability. This means that a single HTTP request with a crafted header value is sufficient to execute arbitrary SQL against the backing PostgreSQL database,… Read More "Fortinet hit by another exploited cybersecurity flaw"
Many government-backed cyber threat actors now use AI throughout the attack lifecycle, especially for reconnaissance and social engineering, a new Google study found. In a report published on February 12, ahead of the Munich Security Conference, Google Threat Intelligence Group… Read More "Nation-State Hackers Embrace Gemini AI for Malicious Campaigns"
The UK’s Information Commissioner’s Office (ICO) has issued a multimillion-pound fine to Reddit for GDPR non-compliance, but experts have warned that its rules pose a risk to user security and privacy. The UK’s data protection regulator said on February 24… Read More "ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns"
A former senior executive at a US defense contractor has been handed an 87-month jail term after selling zero-day exploits to a Russian broker. Australian national Peter Williams, 39, is the former general manager of L3Harris cyber-division Trenchant – a… Read More "Former Defense Contractor Boss Gets 7+ Years for Selling Zero Days"
