Updates
- Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software
- Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software
- Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
- Webbrowser: Update für Google Chrome dichtet hochriskante Sicherheitslücken ab
- Windows 10 KB5029331 update introduces a new Backup app
- Kali Linux 2023.3 released with 9 new tools, internal changes
- Tor-Projekt stellt neue Verteidigung gegen DDoS-Attacken vor
- Bitwarden releases free and open-source E2EE Secrets Manager
Threats
- FBI warnt: Barracuda ESG-Updates nicht ausreichend
- Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware
- New Variant of XLoader macOS Malware Disguised as 'OfficeNote' Productivity App
- Ask the Mac Guy: macOS Security Myths
- Sneaky Amazon Google ad leads to Microsoft support scam
- New Windows updates cause UNSUPPORTED_PROCESSOR blue screens
- New stealthy techniques let hackers gain Windows SYSTEM privileges
- Microsoft: Stealthy Flax Typhoon hackers use LOLBins to evade detection
- TP-Link smart bulbs can let hackers steal your WiFi password
- Ransomware hackers dwell time drops to 5 days, RDP still widely used
- Spoofing an Apple device and tricking users into sharing sensitive data
- Verbraucherzentrale warnt vor Fake-Paypal-Betrugsanrufen
- LKA-Warnung vor Betrugsmails mit Bezug auf Steuerbescheid, Steuerbetrug etc.
Incidents
- Microsoft DNS boo-boo breaks Hotmail around the globe
- Tesla Discloses Data Breach Related to Whistleblower Leak
- Japanese watchmaker Seiko breached by BlackCat ransomware gang
- Nach "Cybervorfall": US-Teleskope in Chile und auf Hawaii seit Wochen offline
- Scraped data of 2.6 million Duolingo users released on hacking forum
- Discord starts notifying users affected by March data breach
- Nachgehakt: Storm-0588 Cloud-Hack und Microsofts Schweigen
- Antworten von Microsoft zum Hack der Microsoft Azure-Cloud durch Storm-0588 - Teil 1
- Antworten des Bundesdatenschutzbeauftragten, Ulrich Kelber, zum Hack der Microsoft Azure-Cloud durch Storm-0588 - Teil 2
Cyber Crime
- Akira ransomware gang spotted targeting Cisco VPN products to hack organizations
- CosmicBeetle-Angriffe: Scarab-Ransomware zielt auf EU-Organisationen
- Interpol arrest 14 who allegedly scammed $40m from victims
- Court finds teenagers carried out Lapsus hacking spree - BBC News
Malware
- HiatusRAT Malware Resurfaces: Taiwan Firms and U.S. Military Under Attack
- More Exotic Excel Files Dropping AgentTesla - SANS Internet Storm Center
- This Malware Turned Thousands of Hacked Windows and macOS PCs into Proxy Servers