The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation. […]
As AI took center stage at this year’s conference, experts debated automation, oversight and the evolving role of human intelligence in cybersecurity — despite the US government’s notable absence.
CVE-2026-5281: Chrome WebGPU Zero-Day Exploited In The Wild Google patched CVE-2026-5281, a high-severity use-after-free (CWE-416) vulnerability in Dawn, Chromium’s WebGPU implementation. The company has confirmed exploitation in the wild, and CISA added it to the Known Exploited Vulnerabilities (KEV) catalog with a remediation deadline for federal agencies. This post breaks down what CVE-2026-5281 is, who […]
Augmented Marauder’s multipronged banking-Trojan cyber campaigns are targeting Spanish speakers, evading detection, and replicating rapidly.
BLACKNET-00: The Ransomware-as-a-Service Platform That Weaponizes Mediocrity How a Custom Ransomware Builder Collapses the Technical Barrier Between Script Kiddies and Enterprise-Grade Ransomware Operations Executive Summary A threat actor named Infrastructure Destruction Squad announced BLACKNET-00 via Telegram, a fully GUI-driven ransomware builder that requires zero programming knowledge to operate. Featuring layered encryption (AES-256, RSA, ChaCha20), a […]
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited […]
Strengere Compliance-Forderungen seitens der EU rücken Resilienz und Datensouveränität in den Fokus – in Deutschland gefertigte Storage-Lösungen für Backup, Archivierung und KI schaffen Abhilfe.
Kleine Zulieferer, große Schwachstelle: Globale Lieferketten machen Unternehmen effizient, aber auch verwundbar. Cybersicherheit heißt heute Third‑Party‑Risk‑Management, Governance und interdisziplinäre Resilienz.
Zum World Backup Day 2026 am 31. März wies Tobias Pföhler von StorMagic auf die Bedeutung einer Wiederherstellung nach einem Datenverlust hin – und warum sich Backup-Strategien ändern müssen.
Die Bedrohungslage im Cyberraum bleibt angespannt: Angreifer werden professioneller, setzen zunehmend KI ein und nutzen gestohlene Identitäten als Einstiegspunkt. Im Interview erklärt Tizian Kohler, Head of Security bei Adlon Intelligent Solutions, warum reines Präventionsdenken nicht mehr ausreicht und Unternehmen Erkennung sowie Reaktionsfähigkeit stärken müssen.