security

7-Zip version 26.02 was released to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open specially crafted compressed files. […]

Public exploits have been released for the critical „wp2shell“ remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. […]

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. […]

As age verification laws expand worldwide, organizations face growing pressure to protect users‘ privacy while meeting regulatory requirements. Incode explains how on-device age estimation verifies age without transmitting or storing facial images, reducing biometric privacy risks while supporting compliance. […]

„wp2shell“: Kritische WordPress-Lücke erlaubt Codeeinschleusung über APIAlertheise security Quelle: Heise Security Ticker

Kleine, aber interessante Meldungshäppchen vom News-Buffet zu Git Browser, Microsoft, Mirantis, Google, Flux, JetBrains, W3C, Gradle und OllyGarden.

Zwei OpenTelemetry-Experten erklären, warum zu viele Daten schaden – und wie ein Top-down-Ansatz die Zuverlässigkeit der Observability rettet.