
Das erwartet Sie in it-daily+
Aktuelle Nachrichten aus Security gap
Alle MeldungenRediShell
Critical security vulnerability in Redis enables system takeover
Security firm Sysdig is warning about a critical security vulnerability in the widely used in-memory data store Redis. The flaw, tracked as CVE-2025-49844 and dubbed "RediShell" by security researchers, has received the maximum CVSS score of 10.0 and allows attackers to gain complete control over affected systems.
Back door for hackers
Cursor: Critical security vulnerability discovered in AI coding tool
Security researchers from Check Point have discovered a serious vulnerability in the popular AI-based developer tool Cursor. The vulnerability allows attackers to permanently inject malicious code into development projects completely unnoticed.
Third zero-day vulnerability actively exploited in 2025
Google closes another critical security vulnerability in Chrome
Google has released an urgent security update for its Chrome browser. The reason for this is a newly exploited vulnerability that is already being actively used by attackers.
CVE-2017-12637
Active exploitation of dangerous SAP security vulnerability
Onapsis Research Labs has made an alarming discovery: the SAP vulnerability CVE-2017-12637 is currently being actively exploited. Cybercriminals are using the vulnerability to gain access to critical SAP configuration files - with potentially devastating consequences.
Patches available
SuperBlack ransomware exploits Fortinet vulnerability
In January 2025, Arctic Wolf's threat research team observed suspicious activity on Fortinet FortiGate firewall devices being exploited by the new SuperBlack ransomware. This vulnerability could jeopardize companies that have not yet applied the patch and highlights the growing threat of targeted cyberattacks.
Hackers were able to execute malicious code
Critical Windows security vulnerability discovered
Researchers from IT security company ESET have uncovered a serious security vulnerability (CVE-2025-24983) in older versions of Windows. The vulnerability allowed hackers to execute malicious code on affected computers using a zero-day exploit.
Security gap
Wiz: DeepSeek database was openly available online for months
The Chinese AI start-up DeepSeek, which has just become known for its powerful language models, had exposed a critical database unprotected on the internet for months. Security researchers were apparently able to access sensitive chat histories and API keys without authentication.
Expedition" migration tool
Vulnerability with high CVSS score in Palo Alto Networks software
The American cyber security authority CISA sounded the alarm on Thursday: a serious security vulnerability in the software of IT security company Palo Alto Networks is already being actively exploited by attackers.
IT-Daily Newsletter
IT-News und Fachwissen. Direkt in Ihr Postfach.
Aktuelle Nachrichten, fundierte Fachbeiträge und Einladungen zu Webinaren – mit den Newslettern von it-daily bleiben Sie informiert.
Entwicklungen und Trends im IT-Management
Aktuelle Themen rund um IT-Security
Neues aus der it-daily-Redaktion

Kostenlos. Jederzeit abmeldbar.












