Security gap - Onlineportal von IT Management

Third zero-day vulnerability actively exploited in 2025

Google closes another critical security vulnerability in Chrome

04. June, 2025 - 11:42

Google has released an urgent security update for its Chrome browser. The reason for this is a newly exploited vulnerability that is already being actively used by attackers.

CVE-2017-12637

Active exploitation of dangerous SAP security vulnerability

26. March, 2025 - 10:54

Onapsis Research Labs has made an alarming discovery: the SAP vulnerability CVE-2017-12637 is currently being actively exploited. Cybercriminals are using the vulnerability to gain access to critical SAP configuration files – with potentially devastating consequences.

Patches available

SuperBlack ransomware exploits Fortinet vulnerability

19. March, 2025 - 09:33

In January 2025, Arctic Wolf’s threat research team observed suspicious activity on Fortinet FortiGate firewall devices being exploited by the new SuperBlack ransomware. This vulnerability could jeopardize companies that have not yet applied the patch and highlights the growing threat of targeted cyberattacks.

Hackers were able to execute malicious code

Critical Windows security vulnerability discovered

17. March, 2025 - 11:41

Researchers from IT security company ESET have uncovered a serious security vulnerability (CVE-2025-24983) in older versions of Windows. The vulnerability allowed hackers to execute malicious code on affected computers using a zero-day exploit.

Security gap

Wiz: DeepSeek database was openly available online for months

30. January, 2025 - 09:13

The Chinese AI start-up DeepSeek, which has just become known for its powerful language models, had exposed a critical database unprotected on the internet for months. Security researchers were apparently able to access sensitive chat histories and API keys without authentication.

Expedition" migration tool

Vulnerability with high CVSS score in Palo Alto Networks software

08. November, 2024 - 10:26

The American cyber security authority CISA sounded the alarm on Thursday: a serious security vulnerability in the software of IT security company Palo Alto Networks is already being actively exploited by attackers.

Over 50 victims according to Mandiant

Zero-day vulnerability in FortiManager

25. October, 2024 - 10:14

Mandiant has published new research on the mass exploitation of the zero-day vulnerability CVE-2024-47575 in FortiManager appliances.

"Sinkclose"

Security vulnerability affects millions of AMD processors

12. August, 2024 - 15:19

A recently discovered security vulnerability named “Sinkclose” is causing concern. Millions of systems with AMD Ryzen and EPYC processors are potentially affected.

GitHub, Gitlab and Bitbucket affected

Vulnerability in Leading Source Code Management Systems

09. July, 2024 - 11:32

Aqua Security, a provider in the field of Cloud Native Security, publishes a new study showing how secret data such as login credentials, API tokens, and passkeys from organizations can remain openly accessible for years in the Git-based infrastructure of most source code management systems (SCMs).

Highly critical weak point

regreSSHion: Biggest discovery of a security vulnerability since log4shell

01. July, 2024 - 15:24

Qualys reports one of the most significant vulnerabilities found in recent years in terms of scale and potential impact.

Google closes another critical security vulnerability in Chrome

Active exploitation of dangerous SAP security vulnerability

SuperBlack ransomware exploits Fortinet vulnerability

Critical Windows security vulnerability discovered

Wiz: DeepSeek database was openly available online for months

Vulnerability with high CVSS score in Palo Alto Networks software

Zero-day vulnerability in FortiManager

Security vulnerability affects millions of AMD processors

Vulnerability in Leading Source Code Management Systems

regreSSHion: Biggest discovery of a security vulnerability since log4shell

Events

Veranstaltungen

Most read articles.

The Bitcoin moment everyone has been waiting for?

Lidl parent company plans cloud attack on Microsoft and Amazon