Weak points - Onlineportal von IT Management

Security patch

SAP closes critical code injection gap in SAP S/4HANA

13. August, 2025 - 09:44

Just in time for the monthly Patch Day, SAP has published 26 security advisories, including four reports classified as particularly critical. The most serious vulnerability has a CVSS score of 9.9 and affects S/4HANA installations.

Complete shutdown possible

Axis vulnerabilities: Hackers gain access to camera feeds

12. August, 2025 - 08:25

Researchers from the cyber security team Team82 have discovered serious vulnerabilities in Axis Communications products. In combination, these vulnerabilities not only allow attackers to watch live broadcasts, but also to switch off cameras and execute malicious code. Axis has now released updates and urges users to install them quickly.

Dahua Hero C1 (DH-H4C)

Critical security vulnerabilities in Dahua surveillance cameras

01. August, 2025 - 16:01

Researchers from Bitdefender have discovered critical vulnerabilities in the firmware of Dahua cameras. Attackers could gain full access to the devices and misuse them for espionage or as part of a botnet.

BeyondTrust Report 2025 warns

Record high for Microsoft vulnerabilities

09. May, 2025 - 08:11

Microsoft is increasingly in the crosshairs of hackers. According to the latest Microsoft Vulnerabilities Report from security company BeyondTrust, a total of 1,360 vulnerabilities were recorded in Microsoft systems in 2024 – more than ever before.

Unpatched security vulnerabilities

Cyberattacks on Palo Alto Networks firewall devices

25. November, 2024 - 14:33

Several security breaches were observed at companies from different industries in which firewall devices from Palo Alto Network were involved.

Ubuntu Server

Vulnerabilities in Ubuntu standard component “needrestart”

20. November, 2024 - 11:28

Researchers from the Qualys Threat Research Unit have discovered five vulnerabilities in the Ubuntu standard component “needrestart”. The vulnerabilities allow local privilege escalation (LPE) on affected systems.

Voice over WiFi (VoWiFi) mobile radio protocol or WLAN calling

Critical security vulnerabilities in Voice over WiFi

02. August, 2024 - 10:01

CISPA researcher Adrian Dabrowski, together with colleagues from SBA Research and the University of Vienna, has uncovered two far-reaching security vulnerabilities in the mobile phone protocol Voice over WiFi (VoWiFi), also known as WLAN calling.

GitHub, Gitlab and Bitbucket affected

Vulnerability in Leading Source Code Management Systems

09. July, 2024 - 11:32

Aqua Security, a provider in the field of Cloud Native Security, publishes a new study showing how secret data such as login credentials, API tokens, and passkeys from organizations can remain openly accessible for years in the Git-based infrastructure of most source code management systems (SCMs).

SAP closes critical code injection gap in SAP S/4HANA

Axis vulnerabilities: Hackers gain access to camera feeds

Critical security vulnerabilities in Dahua surveillance cameras

Record high for Microsoft vulnerabilities

Cyberattacks on Palo Alto Networks firewall devices

Vulnerabilities in Ubuntu standard component “needrestart”

Critical security vulnerabilities in Voice over WiFi

Vulnerability in Leading Source Code Management Systems

Events

Veranstaltungen

Most read articles.

OpenAI launches GPT-5: What the new version can do

Massive Starlink outage: users worldwide affected by disruption