security

New „Storm“ infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA. […]

Netknights hat Version 3.13 seiner MFA-Lösung privacyIDEA veröffentlicht. Sie bietet erweiterte Passkey‑Unterstützung mit Registrierung bei An­mel­dung, auch offline, sowie verbesserte Push‑Token für RADIUS. Die neue WebUI kann in der Beta-Version getestet werden.

Claims that “Microsoft is running one of the largest corporate espionage operations in modern history” face scrutiny as researchers analyze LinkedIn’s browser extension probing The post BrowserGate: Claims of LinkedIn ‘Spying’ Clash With Security Research Findings appeared first on SecurityWeek.

Comments

Comments

Bei einem IT-Vorfall haben sich Unbekannte Zugriff auf das System von Basic-Fit verschafft und dabei persönliche Informationen abgegriffen.

Comments

Last week, I wrote about attackers scanning for various webshells, hoping to find some that do not require authentication or others that use well-known credentials. But some attackers are paying attention and are deploying webshells with more difficult-to-guess credentials. Today, I noticed some scans for what appears to be the „EncystPHP“ web shell. Fortinet wrote […]

The AI giant is taking action after determining that a macOS code signing certificate may have been compromised. The post OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack appeared first on SecurityWeek.

Comments