30.10. 08:51
heise alerts
heise security
30.10. 08:51
Cisco-Firewalls und GitLab-Lücke werden angegriffen
30.10. 06:10
Auslegungssache 171: Omnibus mit Schlagseite
watchguard blog
29.10. 00:00
Stay Ahead of Cybersecurity Challenges: Join WatchGuard's November Webinars
Join WatchGuard's November webinar series to explore IMPACT 2026 innovations, security posture management, and network optimization.
27.10. 00:00
From Detection to Decisions: What's New in ThreatSync and Rai Analyst
Explore the latest ThreatSync and Rai Analyst updates that streamline detection, automate decisions, and accelerate threat response.
21.10. 00:00
Shadow AI Is Only the Symptom: The Real Problem Is SaaS Visibility
Shadow AI highlights a broader challenge: limited SaaS visibility. Discover why understanding applications, integrations, and identities is essential to managing cloud risk.
20.10. 00:00
AuthPoint Earns ENS High Qualification from Spain’s National Cryptologic Centre
AuthPoint is now in the CPSTIC catalog at ENS High, the top tier of Spain’s National Security Framework. What that means for MSPs, wherever they sell.
19.10. 00:00
The Hidden Trade-off in Managed Detection and Response
Find out what to look for when choosing an MDR service, and why visibility is key to effective response.
15.10. 00:00
Cybersecurity Regulations Change. Your Security Architecture Doesn't Have To.
New regulations keep coming, but security fundamentals remain the same. Learn how MSPs can map controls to compliance and create new service opportunities.
watchguard pressreleases
29.10. 00:00
WatchGuard Partner Summit Madrid 2026 impulsa el crecimiento del canal MSP en España
WatchGuard reúne a sus partners en Madrid para impulsar la próxima generación de servicios de ciberseguridad gestionados
21.10. 00:00
WatchGuard Brings CCN-Qualified MFA to Spain's Public Sector
AuthPoint Enters the CPSTIC Catalog as the Only MFA Solution from an MSP-Focused Vendor
20.10. 00:00
WatchGuard Named a 2026 Inc. Power Partner Award Winner
Global leader in unified cybersecurity honored for helping small businesses and MSPs simplify security delivery, strengthen customer protection and grow profitably.
05.10. 00:00
WatchGuard Unveils Major Unified Security Platform® Innovations at IMPACT North America
New innovations help MSPs scale security operations and combat increasingly automated threats
30.09. 00:00
WatchGuard Technologies Appoints Allison Clarke as Vice President of Partner Programs and GTM Strategy
Former Sophos and SonicWall channel leader joins WatchGuard to accelerate a frictionless partner experience and unified go-to-market strategy.
22.09. 00:00
New WatchGuard Threat Report Reveals AI Tooling Underpins Tactical Shift from High-Volume Malware Campaigns to Precision Attacks in 1H 2026
Lower network volume masks broader probing, greater evasion and persistent TLS exposure.
csoonline
19.05. 00:00
Analyse
Schwachstellen managen: Die besten Vulnerability-Management-Tools
19.05. 00:00
Tipp
Security-Infotainment: Die besten Hacker-Dokus
13.05. 00:00
Analyse
Der Kaufratgeber für Breach & Attack Simulation Tools
13.05. 00:00
News
Google entdeckt erstmals KI-basierten Zero-Day-Exploit
12.05. 00:00
Analyse
Cybersicherheitsvorschriften: So erfüllen Sie Ihre Compliance-Anforderungen
12.05. 00:00
Analyse
Customer Identity & Access Management: Die besten CIAM-Tools
secplicity
29.10. 00:00
PHP2Shell: The Patch Is Out. Do You Know Where You're Exposed?
TL;DR Two critical PHP flaws, now patched: CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution, and PHP shipped fixes on October 21. WatchGuard's Red Cell Alert covers the immediate steps; this post looks at what the response exposed. The fix was the clear part: the hard…
27.10. 00:00
How ASCII Smuggling Exploits AI Assistants and Creates Security Blind Spots
TL;DR Invisible instructions, real security risks: ASCII smuggling uses hidden Unicode characters to conceal malicious instructions in content processed by AI assistants. Trusted access can become an attack pathway: Prompt injection can manipulate AI assistants into performing unauthorized actions…
22.10. 00:00
How VBScript Malware Hides Behind Trusted Tools to Evade Detection
TL;DR WatchGuard Red Cell researcher Euler Neto investigated three malware campaigns involving VBScript (VBS), revealing how cybercriminals combine phishing, obfuscated scripts, and legitimate Windows components to deliver malicious payloads while evading detection. The research examines Overlord…
21.10. 00:00
Red Cell Alert: php2shell Critical PHP Remote Code Execution
Critical php2shell flaws (CVE-2026-109618, CVE-2026-109619) let attackers take over PHP servers without logging in. What MSP and Security teams should do now.
17.10. 00:00
Red Cell Alert: ConnectWise Cloud Backup Unauthorized Access
What happened On October 16, 2026, ConnectWise disclosed unauthorized access tied to its Cloud Backup for Microsoft 365 service, formerly known as SkyKick Cloud Backup. ConnectWise has opened incident response, and the investigation is ongoing. Unconfirmed community reports describe an attacker…
13.10. 00:00
The Tales of a Trezor Data Breach Victim
Introduction This post is a first-hand experience of all the phishing attempts against me after my data was exposed in four of the recent Trezor-related breaches. All four of these breaches were of Trezor third-party vendors, not Trezor themselves. The post is written as a personal narrative…
thehackernews
31.12. 00:00
U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Tuesday removed three individuals linked to the Intellexa Consortium, the holding company behind a commercial spyware known as Predator , from the specially designated nationals list. The names of the individuals are as follows - Merom Harpaz Andrea Nicola Constantino Hermes Gambazzi Sara Aleksandra Fayssal Hamou Hamou was sanctioned by OFAC in March 2024, and Harpaz and Gambazzi were targeted in September 2024 in connection with developing, operating, and distributing Predator. It's currently not known why they were removed from the list. Harpaz is said to be working as a manager of Intellexa S.A., while Gambazzi was identified as the owner of Thalestris Limited and Intellexa Limited. Thalestris, Treasury Department said, held the distribution rights to the spyware, and processed transactions on behalf of other entities within the Intellexa Consortium. It's also the parent company...
31.12. 00:00
IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass
IBM has disclosed details of a critical security flaw in API Connect that could allow attackers to gain remote access to the application. The vulnerability, tracked as CVE-2025-13915 , is rated 9.8 out of a maximum of 10.0 on the CVSS scoring system. It has been described as an authentication bypass flaw. "IBM API Connect could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application," the tech giant said in a bulletin. The shortcoming affects the following versions of IBM API Connect - 10.0.8.0 through 10.0.8.5 10.0.11.0 Customers are advised to follow the steps outlined below - Download the fix from Fix Central Extract the files: Readme.md and ibm-apiconnect-<version>-ifix.13195.tar.gz Apply the fix based on the appropriate API Connect version "Customers unable to install the interim fix should disable self-service sign-up on their Developer Portal if enabled, which will help minimise their exp...
31.12. 00:00
Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
Cybersecurity researchers have disclosed details of what appears to be a new strain of Shai Hulud on the npm registry with slight modifications from the previous wave observed last month. The npm package that embeds the novel Shai Hulud strain is " @vietmoney/react-big-calendar ," which was uploaded to npm back in March 2021 by a user named "hoquocdat." It was updated for the first time on December 28, 2025, to version 0.26.2. The package has been downloaded 698 times since its initial publication. The latest version has been downloaded 197 times. Aikido, which spotted the package, said it has not spotted any major spread or infections following the release of the package. "This suggests we may have caught the attackers testing their payload," security researcher Charlie Eriksen said . "The differences in the code suggests that this was obfuscated again from the original source, not modified in place. This makes it highly unlikely to be a copy-ca...
31.12. 00:00
Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud (aka Sha1-Hulud) supply chain outbreak in November 2025 was likely responsible for the hack of its Google Chrome extension, ultimately resulting in the theft of approximately $8.5 million in assets. "Our Developer GitHub secrets were exposed in the attack, which gave the attacker access to our browser extension source code and the Chrome Web Store (CWS) API key," the company said in a post-mortem published Tuesday. "The attacker obtained full CWS API access via the leaked key, allowing builds to be uploaded directly without Trust Wallet's standard release process, which requires internal approval/manual review." Subsequently, the attacker is said to have registered the domain "metrics-trustwallet[.]com" and pushed a trojanized version of the extension with a backdoor that's capable of harvesting users' wallet mnemonic phrases to the sub-domain "api.metrics-...
31.12. 00:00
DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide
The threat actor behind two malicious browser extension campaigns, ShadyPanda and GhostPoster , has been attributed to a third attack campaign codenamed DarkSpectre that has impacted 2.2 million users of Google Chrome, Microsoft Edge, and Mozilla Firefox. The activity is assessed to be the work of a Chinese threat actor that Koi Security is tracking under the moniker DarkSpectre . In all, the campaigns have collectively affected over 8.8 million users spanning a period of more than seven years. ShadyPanda was first unmasked by the cybersecurity company earlier this month as targeting all three browser users to facilitate data theft, search query hijacking, and affiliate fraud. It has been found to affect 5.6 million users, including 1.3 newly identified victims stemming from over 100 extensions flagged as connected to the same cluster. This also includes an Edge add-on named "New Tab - Customized Dashboard" that features a logic bomb that waits for three days prior to t...
30.12. 00:00
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of a maximum-severity security flaw in SmarterTools SmarterMail email software that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-2025-52691 , carries a CVSS score of 10.0. It relates to a case of arbitrary file upload that could enable code execution without requiring any authentication. "Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution," CSA said. Vulnerabilities of this kind allow the upload of dangerous file types that are automatically processed within an application's environment. This could pave the way for code execution if the uploaded file is interpreted and executed as code, as is the case with PHP files. In a hypothetical attack scenario, a bad actor could weaponize this vulnerability to place malici...
borncity
30.10. 00:00
Windows Sicherheit: Ist der Defender kaputt?
Kurze Frage an die Leserschaft, ob jemand Probleme beim Microsoft Defender unter Windows bemerkt hat. Ich bekomme die letzten Tage häufiger die Meldung, dass der Virenschutz nicht aktuell sei. Und nun streikt Windows-Sicherheit und verweigert den Zugriff.
30.10. 00:00
Problem mit Vodafone (ARRIS) Kabelmodem: Verbindungsaufnahme scheitert
Gibt es ein Problem mit den firmeneigenen Kabelmodems (speziell von ARRIS), die nach einem Stromausfall keine Verbindung mehr zum Internet aufbauen können. Eine Leser hat mich auf die Problematik hingewiesen.
30.10. 00:00
Sicherheits-Meldungen: Schwachstellen und Angriffe (30.10.2026)
Ich ziehe mal eine Reihe Sicherheitsmeldungen, die mir die letzten Tage untergekommen sind, in einem Sammelbeitrag. In Linux gibt es eine kritische Schwachstelle im Kernel. Es gibt Angriffe auf Linux und VMware. Der TeamViewer kann bei Verbindungen zum "falschen Partner" zur Gefahr werden. Sony ISP wurde wohl gehackt, Supermicro Motherboards haben eine BMC-Schwachstelle, zum Cyberangriff auf Berlin sind neue Informationen bekannt geworden, und so weiter.
30.10. 00:00
VMware: Kritischer Sicherheitshinweis für Brotli-Schwachstelle (Node.js) in VCF
VMware hat zum 28. Oktober 2026 einen Sicherheitshinweis veröffentlicht, der die kritische Schwachstelle in der Brotli-Bibliothek im SDDC-Manager (VCF) betrifft. Gleichzeitig hat VMware Anleitungen zur Entschärfung bereitgestellt, da Updates mit entsprechenden Sicherheitskorrekturen noch nicht verfügbar sind.
29.10. 00:00
Exchange-Hybrid-Migration scheitert mit MRSProxy 401 / CommunicationErrorTransientException-Fehler
Ein Blog-Leser hat sich vor einigen Tagen gemeldet und berichtete über massive Probleme bei einer Exchange-Hybrid-Migration. Die Migration der Postfächer von einem OnPrem Microsoft nach Microsoft 365 Exchange Online (Exchange Remote Move) funktioniert laut Leser nicht mehr. Die Exchange-Hybrid-Migration scheitert mit einem MRSProxy 401 (CommunicationErrorTransientException) Fehler.
29.10. 00:00
Windows 11 25H2 – 26H2: Preview Update KB5127936 (28. Oktober 2026)
Microsoft hat zum (28. Oktober 2026 das Preview Update KB5127936 für Windows 11 25H2 – 26H2 veröffentlicht. Dieses Update soll einige Fehler in den genannten Windows 11-Versionen beheben (Windows 11 24H2 erhält das Preview-Update nicht mehr, da es teilweise aus dem Support gefallen ist). Hier ein Überblick, welche Neuerungen Microsoft im Preview-Update untergebracht hat.