security

📅 Kalender

< April 2026 >
Mo
Di
Mi
Do
Fr
Sa
So
12345678910111213141516
17
18
19
20
21
22
23
24
25
26
27
28
29
30
Gefiltert nach: 14. April 2026
security

HTTP-Client Axios für Supply-Chain-Angriff missbraucht

Der HTTP-Client Axios ist aufgrund eines Lieferkettenangriffs über mani­pu­lierte NPM-Versionen anfällig für die Installation von Remote-Access-Tro­ja­nern. Dahinter stecken nordkoreanische Akteure und nicht wie zuerst ver­mu­tet die Gruppe TeamPCP, die für andere Attacken verantwortlich ist.

Mehr lesen →
soc

Top 10 Free Threat Intelligence Tools for MSSPs

Top 10 Free Threat Intelligence Tools for MSSPs Threat intelligence helps Managed Security Service Providers (MSSPs) move faster, prioritize better, and give clients clearer answers when new risks appear. Without reliable visibility into indicators of compromise, active threats, adversary behavior, and exposed assets, even a strong SOC can lose valuable time during triage and response. […]

Mehr lesen →
soc

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2009-0238 Microsoft Office Remote Code Execution Vulnerability CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability  These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding […]

Mehr lesen →