“If you don’t include people with disabilities or people with facial differences in the development of these processes, no one’s going to think of these issues,” says Kathleen Bogart, a psychology professor at Oregon State University who specializes in disability… Read More "When Face Recognition Doesn’t Know Your Face Is a Face"
Oct 15, 2025Ravie LakshmananVulnerability / Critical Infrastructure Cybersecurity researchers have disclosed two critical security flaws impacting Red Lion Sixnet remote terminal unit (RTU) products that, if successfully exploited, could result in code execution with the highest privileges. The shortcomings, tracked… Read More "Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control"
Prorussische Hacker haben die Internetseite des Deutschen Vergabeportals fast eine Woche lang lahmgelegt. ozrimoz – shutterstock Prorussische Hacker haben nach einem Bericht der Süddeutschen Zeitung (SZ) die Webseite des Deutschen Vergabeportals des Bundes in die Knie gezwungen. Durch die Cyberattacke… Read More "Hacker attackieren Vergabeportal für öffentliche Aufträge"
Supplier risk is a top contributor to data breaches. On average, a single data breach costs companies $4.9 million, according to the 2024 Cost of a Data Breach Report by IBM. To counteract this growing threat, many organizations are investing… Read More "Best Vendor Risk Management Software for 2025"
Oct 15, 2025Ravie Lakshmanan Enterprise Software / Vulnerability SAP has rolled out security fixes for 13 new security issues, including additional hardening for a maximum-severity bug in SAP NetWeaver AS Java that could result in arbitrary command execution. The vulnerability,… Read More "New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login"
In fact, NIST has already published a set of encryption tools designed to resist attacks from quantum computers and has urged system administrators to start transitioning to these new standards “as soon as possible.” Some tech providers are aware of… Read More "13 cybersecurity myths organizations need to stop believing"
The Department of War’s (DoW) new Cybersecurity Risk Management Construct (CSRMC) marks a watershed moment for cyber defense. This move confirms that static, checklist-based security is obsolete. To defend against modern threats, organizations must adopt the continuous and proactive posture… Read More "A CISO’s Guide to the DoW’s New CSRMC Framework"
The tools designed to build your next product are now being used to build the perfect attack against it. Generative AI platforms can spin up a pixel-perfect replica of your brand’s login page in minutes, launching high-fidelity phishing campaigns at… Read More "A CISO’s Guide to the Business Risks of AI Development Platforms"
Keylogger sind Malware der alten Schule. Lesen Sie, wie die Tools zur Tastaturüberwachung funktionieren und warum sie nicht nur etwas für Cyberkriminelle sind. IM_photo | shutterstock.com Auch wenn Keylogger schon etliche Jahre auf dem Buckel haben: Sie sind immer noch… Read More "Was ist ein Keylogger?"
WSUS RCE CVE-2025-59287, which could allow remote code execution (RCE) in the Windows Server Update Service (WSUS). It was assigned a CVSSv3 score of 9.8 and rated critical, and has been assessed as ‘Exploitation More Likely’ according to Microsoft’s Exploitability Index.… Read More "October 2025 Patch Tuesday: Holes in Windows Server Update Service and an ancient modem driver"
