Thought Leadership
Warning signal for the entire industry
The security researchers at Check Point have discovered a zero-click vulnerability in Microsoft 365 Copilot, which they have named “EchoLink”.
CVE-2025-8088
Attackers exploited a directory traversal vulnerability in WinRAR to spread malware via manipulated archives. The vulnerability CVE-2025-8088 has been patched since version 7.13.
Back door for hackers
Security researchers from Check Point have discovered a serious vulnerability in the popular AI-based developer tool Cursor. The vulnerability allows attackers to permanently inject malicious code into development projects completely unnoticed.
Thousands of SAP applications at risk
Security experts have identified a serious security vulnerability in SAP NetWeaver that allows unauthorized access to company systems. The vulnerability became known in April 2025 and specifically affects the Visual Composer component of SAP Java systems.
Hidden danger in the ZIP file
A recently discovered vulnerability in the popular WinRAR archiving software (CVE-2025-31334) is causing a stir: It allows attackers to bypass the security warnings integrated into Windows – known as “Mark of the Web” (MotW).
CVE-2017-12637
Onapsis Research Labs has made an alarming discovery: the SAP vulnerability CVE-2017-12637 is currently being actively exploited. Cybercriminals are using the vulnerability to gain access to critical SAP configuration files – with potentially devastating consequences.
Patch is ready
Google has released a critical security patch for its Chrome browser after Kaspersky discovered a serious zero-day security vulnerability.
Unencrypted HTTP connections
The Apple Passwords app introduced as part of iOS 18 had a critical security vulnerability that left users vulnerable to phishing attacks over a period of almost three months. The problem was only fixed with the update to iOS 18.2.
Patches available
In January 2025, Arctic Wolf’s threat research team observed suspicious activity on Fortinet FortiGate firewall devices being exploited by the new SuperBlack ransomware. This vulnerability could jeopardize companies that have not yet applied the patch and highlights the growing threat of targeted cyberattacks.
Hackers were able to execute malicious code
Researchers from IT security company ESET have uncovered a serious security vulnerability (CVE-2025-24983) in older versions of Windows. The vulnerability allowed hackers to execute malicious code on affected computers using a zero-day exploit.
Events
Veranstaltungen
Most read articles.
19. August 2025
18. August 2025
18. August 2025