security

📅 Kalender

< April 2026 >
Gefiltert nach: 23. April 2026
soc

CVE-2026-40372: Critical ASP.NET Core Flaw May Let Attackers Gain SYSTEM Privileges

Microsoft has released out-of-band updates for CVE-2026-40372, a high-impact ASP.NET Core privilege-escalation vulnerability tied to the platform’s Data Protection cryptographic APIs. Public reporting says the flaw carries a CVSS score of 9.1 and could allow an unauthenticated attacker to forge authentication material and ultimately obtain SYSTEM privileges on affected systems. The issue stands out not […]

Mehr lesen →
soc

How OSINT is Used in Cybersecurity (Real-World Use Cases)

How OSINT is Used in Cybersecurity (Real-World Use Cases) In 2018, investigators at Bellingcat unmasked 305 officers from Russia’s military intelligence unit, GRU Unit 26165, using nothing but a public vehicle registration database and a Moscow address. No classified leaks. No hacking. Just open-source data, read carefully. That story captures what OSINT is and why […]

Mehr lesen →
security

Mit den Bedrohungen mitwachsen

In unserer fünfteiligen Serie zur Datenresilienz gehen wir auf die unterschiedlichen Aspekte des Themas ein: Teil 1 beschäftigt sich mit der einleitenden Frage, was unter Datenresilienz zu verstehen ist und welche Kernaspekte sie umfasst.

Mehr lesen →