Drum prüfe… Miljan Zivkovic | shutterstock.com Die zunehmende Abhängigkeit von IT-Dienstleistern und Software von Drittanbietern vergrößert die Angriffsfläche von Unternehmen erheblich. Das wird auch durch zahlreiche Cyberattacken immer wieder unterstrichen. Zwar lassen sich die Risiken in Zusammenhang mit Third-Party-Anbietern nicht… Read More "13 Fragen gegen Drittanbieterrisiken"
Newsletter platform Substack has confirmed it suffered a security incident, leading to the compromise of users’ email addresses and phone numbers. Chris Best, the CEO of Substack, notified users of the data breach in an email sent to some users… Read More "Substack Confirms Data Breach, “Limited User Data” Compromised"
The problem it addresses is that traditional IAM tools assume that applications are being accessed by human users or machine identities, governed by a one-time authentication process. But agents, which assume long chains of actions conducted at incredible speed, don’t… Read More "Curity looks to reinvent IAM with runtime authorization for AI agents"
A malware framework that remained hidden for years has been discovered by security researchers at Cisco Talos. The researchers were hunting for samples of DarkNimbus, a backdoor linked to the MOONSHINE exploit kit which have both been known about since 2023, when they… Read More "Chinese-Made Malware Kit Targets Chinese-Based Edge Devices"
Teams must be adequately resourced to cope Reguly said CISOs this month might be worried about the sheer number of items that admins have to review. “There are a lot of CVEs and a lot of one-offs that we don’t… Read More "April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs"
Amid exploitation campaigns targeting end of support (EOS) edge devices, the US’ leading cybersecurity agency has issued a directive to decommission all such devices within 12 months. On February 5, the Cybersecurity and Infrastructure Security Agency (CISA) published Binding Operational… Read More "US Agencies Told to Scrap End of Support Edge Devices"
Widespread misconfiguration of popular AI assistant OpenClaw means many instances are exposed to the public-facing internet, SecurityScorecard has warned. The security vendor said it found 40,214 such instances of the tool, formerly known as Clawdbot and Moltbot, although the figure… Read More "Researchers Find 40,000+ Exposed OpenClaw Instances"
Social media sites received nearly £3.8bn ($5.2bn) in revenue from malicious ads in Europe in 2025, off the back of almost one trillion impressions, according to Juniper Research. The analyst used publicly available data to study ads on Facebook, Instagram,… Read More "Social Media Platforms Earn Billions from Scam Ads"
The new N-able and Futurum Report reveals how AI is reshaping cyber resilience as it accelerates both business innovation and adversarial tradecraft. Attackers are scaling their operations with unprecedented speed, leveraging automation to bypass traditional defenses. For IT security leaders… Read More "5 trends defining the future of AI-powered cybersecurity"
US payments platform provider BridgePay has confirmed it is experiencing an IT outage due to a ransomware attack. In a series of security alerts published on February 6, the Florida-based company said the attack caused “system-wide service disruption.” The firm… Read More "BridgePay Confirms Ransomware Attack, No Card Data Compromised"
