Security gap - Onlineportal von IT Management

RediShell

Critical security vulnerability in Redis enables system takeover

16. Oktober, 2025 - 17:27

Security firm Sysdig is warning about a critical security vulnerability in the widely used in-memory data store Redis. The flaw, tracked as CVE-2025-49844 and dubbed “RediShell” by security researchers, has received the maximum CVSS score of 10.0 and allows attackers to gain complete control over affected systems.

Back door for hackers

Cursor: Critical security vulnerability discovered in AI coding tool

06. August, 2025 - 10:35

Security researchers from Check Point have discovered a serious vulnerability in the popular AI-based developer tool Cursor. The vulnerability allows attackers to permanently inject malicious code into development projects completely unnoticed.

Third zero-day vulnerability actively exploited in 2025

Google closes another critical security vulnerability in Chrome

04. Juni, 2025 - 11:42

Google has released an urgent security update for its Chrome browser. The reason for this is a newly exploited vulnerability that is already being actively used by attackers.

CVE-2017-12637

Active exploitation of dangerous SAP security vulnerability

26. März, 2025 - 10:54

Onapsis Research Labs has made an alarming discovery: the SAP vulnerability CVE-2017-12637 is currently being actively exploited. Cybercriminals are using the vulnerability to gain access to critical SAP configuration files – with potentially devastating consequences.

Patches available

SuperBlack ransomware exploits Fortinet vulnerability

19. März, 2025 - 09:33

In January 2025, Arctic Wolf’s threat research team observed suspicious activity on Fortinet FortiGate firewall devices being exploited by the new SuperBlack ransomware. This vulnerability could jeopardize companies that have not yet applied the patch and highlights the growing threat of targeted cyberattacks.

Hackers were able to execute malicious code

Critical Windows security vulnerability discovered

17. März, 2025 - 11:41

Researchers from IT security company ESET have uncovered a serious security vulnerability (CVE-2025-24983) in older versions of Windows. The vulnerability allowed hackers to execute malicious code on affected computers using a zero-day exploit.

Security gap

Wiz: DeepSeek database was openly available online for months

30. Januar, 2025 - 09:13

The Chinese AI start-up DeepSeek, which has just become known for its powerful language models, had exposed a critical database unprotected on the internet for months. Security researchers were apparently able to access sensitive chat histories and API keys without authentication.

Expedition" migration tool

Vulnerability with high CVSS score in Palo Alto Networks software

08. November, 2024 - 10:26

The American cyber security authority CISA sounded the alarm on Thursday: a serious security vulnerability in the software of IT security company Palo Alto Networks is already being actively exploited by attackers.

Over 50 victims according to Mandiant

Zero-day vulnerability in FortiManager

25. Oktober, 2024 - 10:14

Mandiant has published new research on the mass exploitation of the zero-day vulnerability CVE-2024-47575 in FortiManager appliances.

"Sinkclose"

Security vulnerability affects millions of AMD processors

12. August, 2024 - 15:19

A recently discovered security vulnerability named “Sinkclose” is causing concern. Millions of systems with AMD Ryzen and EPYC processors are potentially affected.

Critical security vulnerability in Redis enables system takeover

Cursor: Critical security vulnerability discovered in AI coding tool

Google closes another critical security vulnerability in Chrome

Active exploitation of dangerous SAP security vulnerability

SuperBlack ransomware exploits Fortinet vulnerability

Critical Windows security vulnerability discovered

Wiz: DeepSeek database was openly available online for months

Vulnerability with high CVSS score in Palo Alto Networks software

Zero-day vulnerability in FortiManager

Security vulnerability affects millions of AMD processors

Meistgelesene Artikel

Hacker nutzen Hype um Perplexitys KI-Browser Comet aus

Cyber-Manager soll Geheimnisse an Russland verkauft haben

ChatGPT down: Nutzer melden aktuell Störungen

Riesenstörung bei AWS: Zahlreiche Dienste lahmgelegt

Canva mit massiven Störungen – Plattform nicht erreichbar

IT Verlag

Wichtige Links

Kontakt