IT news

5,426 items

Bridge to 6G: Vodafone is already testing 5G Advanced in Germany

Vodafone's new head of technology explains why 5G Advanced is being brought to the mobile network, but the company is hesitant about Docsis 4.0. By Achim Sawall (Vodafone, cable network)

borderlinecybersecurity

Golem Security (DE)56d05/21

Advertisement: MicroSD Express with 256 GB at the lowest price on Amazon

Only for the second time: Amazon is selling the 256 GB Lexar Play Pro MicroSD Express card for Switch 2 again for less than 51 euros. (storage media, Amazon)

off-topiccybersecurity

Dark Reading56d05/21

AI Agents Are Shifting Identity Security Budget Dynamics

AI agent projects are proliferating throughout the enterprise, and those AI agent identities require management, security, and governance. New Omdia research shows the AI agent identity budget dynamics are very different than traditional IAM projects.

cybersecurity · government-security · regulation

Palo Alto Unit4256d05/21

The npm Threat Landscape: Attack Surface and Mitigations (Updated May 21)

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The npm Threat Landscape: Attack Surface and Mitigations (Updated May 21) appeared first on Unit 42.

cybersecurity

BleepingComputer56d05/21

Apple blocked over $11 billion in App Store fraud in 6 years

Apple revealed that it blocked over $11 billion in fraudulent App Store transactions over the last six years, more than $2.2 billion in potentially fraudulent App Store transactions in 2025 alone. [...]

borderlinecybersecurity

BleepingComputer56d05/21

Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet

Modern crypto drainers don't hack wallets. They trick users into approving malicious transactions. Flare explores how the Lucifer DaaS platform scales wallet theft through phishing and automation. [...]

cybersecurity

Dark Reading56d05/21

Chinese APTs Share Linux Backdoor in Central Asia Telco Attacks

"Showboat" doesn't show off, but clearly it doesn't need to, as it's long helped China spy on small market communications providers.

cybersecurity · government-security · regulation

BleepingComputer56d05/21

Chinese hackers target telcos with new Linux, Windows malware

A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux and Windows malware dubbed Showboat and JFMBackdoor, respectively. [...]

cybersecurity

BleepingComputer56d05/21

Max severity Cisco Secure Workload flaw gives Site Admin privileges

Cisco has released security updates to address a maximum-severity vulnerability in Secure Workload that allows attackers to gain Site Admin privileges. [...]

cybersecurity

BleepingComputer56d05/21

Police seize “First VPN” service used in ransomware, data theft attacks

A virtual private network service called 'First VPN,' used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement operation. [...]

cybersecurity

Dark Reading56d05/21

Content Delivery Exploit Opens Websites to Brand Hijacking

The Underminr domain-fronting attack allows threat actors to modify Web requests and leverage trusted websites to cloak malicious activity.

cybersecurity · government-security · regulation

SecurityWeek56d05/21

Cisco Patches Critical Vulnerability in Secure Workload

Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges. The post Cisco Patches Critical Vulnerability in Secure Workload appeared first on SecurityWeek.

cybersecurity

CISA Cybersecurity Advisories56d05/21

ABB B&R Automation Runtime

View CSAF Summary An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could take over a remote session or execute code in the context of the user’s browser session. The following versions of ABB B&R Automation Runtime are affected: Automation Runtime <6.4, 6.4 (CVE-2025-3449, CVE-2025-3448, CVE-2025-11498) CVSS Vendor Equipment V

cybersecurity

CISA Cybersecurity Advisories56d05/21

ABB Terra AC Wallbox

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a write operation to the flash memory to alter the firmware behavior. The following versions of ABB Terra AC Wallbox are affected: Terra AC wallbox (JP) <=1.8.33, 1.8.36 (CVE-2025-10504, CVE-2025-12142, CVE-2025-12143) CVSS

cybersecurity

CISA Cybersecurity Advisories56d05/21

ABB B&R Automation Studio

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution. The following versions of ABB B&R Automation Studio are affected: B&R Au

cybersecurity

CISA Cybersecurity Advisories56d05/21

Hitachi Energy GMS600

View CSAF Summary Hitachi Energy is aware of the vulnerability, CVE-2022-4304 in the OSS component OpenSSL, that affects the GMS600 versions that are listed below. An attacker successfully exploiting this vulnerability could send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connec

cybersecurity

CISA Cybersecurity Advisories56d05/21

ABB B&R PCs

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS attacks, conduct DNS cache poisoning, or extract sensitive information. The following versions of ABB B&R PCs are affected: APC4100 <1.09, 1.09 (CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-4523

cybersecurity

FTC Technology News56d05/21

FTC to Require Cox Media Group, Two Other Firms to Pay Nearly $1 Million to Settle Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service

FTC alleged the companies falsely claimed service could target ads using conversations from consumers’ smart devices and that consumers had opted in The Federal Trade Commission will require Cox Media Group (CMG) and two smaller marketing firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into suc

data-protection · unknown-it-category-6 · vulnerability

CISA Cybersecurity Advisories56d05/21

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-34291 Langflow Origin Validation Error Vulnerability CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Know

cybersecurity · government-security · privacy

SecurityWeek56d05/21

Ocean Emerges From Stealth With $28M for Agentic Email Security Platform

The company has developed a platform that uses specialized AI agents to inspect every incoming message. The post Ocean Emerges From Stealth With $28M for Agentic Email Security Platform appeared first on SecurityWeek.

cybersecurity

TechCrunch Security56d05/21

Scammers are abusing an internal Microsoft account to send spam links

The loophole allows spammers and scammers to send emails from a legitimate Microsoft email address typically used for sending genuine account alerts.

off-topiccybercrime

SecurityWeek56d05/21

Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention

The company blocked over 1.1 billion accounts and $2.2 billion in potentially fraudulent transactions. The post Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention appeared first on SecurityWeek.

cybersecurity

Heise Security (DE)56d05/21

Modular small computer: Flipper One becomes a universal Linux cyberdeck

The Flipper One is not intended to be a mere successor to the successful gadget, but rather a versatile mobile companion. The community should help develop.

borderlinecybersecurity

BleepingComputer56d05/21

Flipper One project needs community help to build open Linux platform

Flipper Devices, the maker of the Flipper Zero pentesting tool, is asking the community to help build Flipper One, an open Linux platform for connected devices. [...]

borderlinecybersecurity

SecurityWeek56d05/21

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking

CVE-2026-9082 can be exploited without authentication for information disclosure, privilege escalation, and remote code execution. The post Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking appeared first on SecurityWeek.

cybersecurity

Netzpolitik (DE)56d05/21

After being shot in the head: How Argentine activists brought a police officer to court

Fabian Grillo, the father of Pablo Grillo, at a demonstration in Buenos Aires in March 2025. - All rights reserved: IMAGO / NurPhoto A good year ago, a tear gas cartridge pierced the skull of the photographer Pablo Grillo. The police officer who fired the gun is in court today. This was only possible because volunteers spent days digging through videos.

off-topicunknown-it-category-7 · unknown-it-category-6 · unknown-it-category-8

Heise Security (DE)56d05/21

Anonymizing Linux: Tails 7.8 turns Thunderbird into additional software

Linux Tails 7.8, intended for anonymous surfing on the Internet, closes some kernel gaps and turns Thunderbird into additional software.

borderlinecybersecurity

Netzpolitik (DE)56d05/21

HateAid after US entry ban: “We shouldn’t have to fear being pushed in front of the bus”

According to the State Department, Josephine Ballon is part of the "global censorship industrial complex." - All rights reserved: Sven SerkisThe USA imposed entry bans on HateAid managing director Josephine Ballon and her colleague - because they help enforce EU laws against platforms. In the interview, Ballon talks about intimidation, fear of financial sanctions and the need to become independent from US digital companies.

off-topicunknown-it-category-7 · unknown-it-category-6 · unknown-it-category-8

Wired Security56d05/21

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

regulation

Bundestag Nachrichten56d05/21

The Berlin-Taipei Parliamentary Circle of Friends is traveling to Taiwan from May 23rd to 31st, 2026

From May 23 to 31, 2026, a delegation from the Berlin-Taipei Parliamentary Friends' Circle will travel to Taiwan for bilateral parliamentary exchanges in order to strengthen economic and cultural cooperation with one of the most important democratic partners in the region. The Circle of Friends sees this as an opportunity to open up new areas of cooperation in discussions with members of parliament or legislative committees, government representatives and contacts within civil society

off-topicunknown-it-category-8

← PrevPage 167 / 181Next →