FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist
The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign....
Aktuelle News & Analysen
Security News
Bleiben Sie informiert über die neuesten Cyber-Bedrohungen, Sicherheitslücken, Ransomware-Kampagnen und wichtige Entwicklungen aus der Security-Welt.
ENDPUNKTSICHERHEIT
Microsoft quietly extends free Windows 10 ESU support to October 2027
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing…
ENDPUNKTSICHERHEIT
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to…
INFORMATIONSSICHERHEIT
Forget Data Leakage: Shadow AI’s Real Threat Is Access Control
The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools.…
INFORMATIONSSICHERHEIT
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR
Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions during…
IAM / ZERO TRUST
29-Year-Old Squid Proxy Bug ‚Squidbleed‘ Can Leak Cleartext HTTP Requests
A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session…