IT Security News Daily Summary 2025-01-09

183 posts were published in the last hour

22:26 : Meta’s New Content Policy Will Harm Vulnerable Users. If It Really Valued Free Speech, It Would Make These Changes
22:26 : Look for the label: White House rolls out ‘Cyber Trust Mark’ for smart devices
21:32 : Rumble Among 15 Targets of Texas Attorney General’s Child Privacy Probe
21:32 : Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location
21:20 : Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability
20:23 : KI und Klimawandel: Dieses Tool berechnet den CO2-Ausstoß deiner Prompts
20:22 : What’s Next for Open Source Software Security in 2025?
20:22 : How the US TikTok Ban Would Actually Work
20:22 : Randall Munroe’s XKCD ‘Features of Adulthood’
20:5 : IT Security News Hourly Summary 2025-01-09 21h : 3 posts
19:32 : Do we still have to keep doing it like this?
19:11 : The Key to AI-Enabled Multi-Coalition Warfare
19:11 : US Billionaire Proposes Bid For TikTok’s US Assets
18:32 : Harnessing AI for Proactive Threat Intelligence and Advanced Cyber Defense
18:3 : The Best of CES 2025 awards are in, as selected by ZDNET and the rest of CNET Group
18:3 : How to encrypt any email – in Outlook, Gmail, and other popular services
18:3 : Facebook awards researcher $100,000 for finding bug that granted internal access
18:3 : Banking Fraud: Jumped Deposit Scam Targets UPI Users
18:3 : RIBridges Data Breach: Sensitive Information of Rhode Islanders Exposed
18:3 : Banshee Stealer variant targets Russian-speaking macOS users
18:3 : Major Vulnerabilities Patched in SonicWall, Palo Alto Expedition, and Aviatrix Controllers
17:32 : Zero-Day Vulnerability in Ivanti VPN
17:32 : Fancy Product Designer Plugin Flaws Expose WordPress Sites
17:32 : Securing a city-sized event: How Amazon integrates physical and logical security at re:Invent
17:17 : EuGH: Zwang zur Angabe des Geschlechts für Marketingzwecke unzulässig
17:16 : Google Donates $1 Million To Donald Trump Inauguration Fund
17:16 : Space Bears Ransomware: What You Need To Know
17:16 : Carving
17:16 : How Do Hackers Exploit Your Vulnerabilities?
17:16 : Google Chrome AI extensions deliver info-stealing malware in broad attack
17:16 : ‘FireScam’ Malware Targets Android Users with Fake Telegram Premium App
17:16 : Practical Tips to Avoid Oversharing and Protect Your Online Privacy
17:5 : IT Security News Hourly Summary 2025-01-09 18h : 13 posts
16:33 : Erlaubt eine neue Phishing-Masche die Übernahme von PayPal-Konten?
16:33 : PowerSchool says hackers stole students’ sensitive data, including Social Security numbers, in data breach
16:33 : The Hidden Costs of Poor Access Management: Why Small Businesses Can’t Afford to Ignore It
16:33 : Open Interfaces Needed to Cut Security Operations Costs & Boost Efficiency
16:33 : Japan Faces Prolonged Cyber-Attacks Linked to China’s MirrorFace
16:19 : PowerSchool software cyber attack might impact 45m students in the United States
16:19 : Microsoft Confirms Job Cuts Based On Performance
16:19 : Diffbot’s AI model doesn’t guess — it knows, thanks to a trillion-fact knowledge graph
16:19 : IPVanish VPN Review: Is It Really as Secure as Claimed?
16:18 : December ransomware attacks slam healthcare, public services
16:18 : Ukrainian Cyber Alliance destroyed the connectivity of Russian ISP Nodex
16:18 : Massive breach at location data seller: “Millions” of users affected
16:18 : PowerSchool Reportedly Pays Ransom to Prevent Student Data Leak
15:32 : Cybersecurity Risks in Crypto: Phishing, Ransomware and Other Emerging Threats
15:18 : Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)
15:18 : Criminal IP Launches Real-Time Phishing Detection Tool on Microsoft Marketplace
15:18 : Diffbot’s AI model doesn’t guess—it knows, thanks to a trillion-fact knowledge graph
15:18 : Zero-day exploits plague Ivanti Connect Secure appliances for second year running
14:35 : Schutz vor Spam-Anrufen: So wehrst du dich effektiv gegen nervige Telefonbetrüger
14:35 : Nach Skandal um Paypal-App Honey: So deinstalliert ihr die Erweiterung von allen Geräten
14:35 : Ingenieur baut ChatGPT-gesteuertes Geschütz: OpenAI reagiert auf die Waffe
14:35 : Whatsapp reagiert auf Kritik: Bald könnt ihr nervige Animationen deaktivieren
14:35 : Angeblich Datenleck bei Datensammler Gravy Analytics
14:34 : Security Implications of Configuration Drift
14:34 : New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption
14:14 : VdS Schadenverhütung: „Produkte und Unternehmen“ neu aufgeteilt
14:14 : Offenbar Datenleck bei Positionsdatensammler Gravy Analytics
14:14 : Outgoing SEC Chair Gary Gensler Lashes Out At Crypto Industry
14:14 : A Hands-On Guide to Enable Amazon GuardDuty on AWS Account
14:14 : GroupGreeting e-card site attacked in “zqxq” campaign
14:13 : Darktrace to Acquire Incident Investigation Firm Cado Security
14:13 : Leveraging Government Grants to Enhance Critical Security Systems
14:5 : IT Security News Hourly Summary 2025-01-09 15h : 14 posts
13:33 : Security pros baited with fake Windows LDAP exploit traps
13:33 : Building Resilience Into Cyber-Physical Systems Has Never Been This Mission-Critical
13:32 : Code Intelligence Spark automates software testing
13:32 : Product Review: How Reco Discovers Shadow AI in SaaS
13:19 : Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
13:19 : Übernahme fremder Konten: Ungewöhnlicher Phishing-Angriff zielt auf Paypal-Nutzer
13:19 : [UPDATE] [hoch] Red Hat OpenShift: Mehrere Schwachstellen
13:18 : Thousands of Live Hacker Backdoors Found in Expired Domains
13:18 : New PayPal Phishing Abusing Microsoft365 Domains for Sophisticated Attacks
13:18 : Cracking the Code: How Banshee Stealer Targets macOS Users
13:18 : Hackers are exploiting a new Ivanti VPN security bug to hack into company networks
13:18 : U.S. CISA adds Ivanti Connect Secure, Policy Secure, and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog
13:18 : GFI KerioControl Firewall Vulnerability Exploited in the Wild
13:18 : EU Commission Liable for Breaching EU’s Own Data Protection Rules
12:32 : Cybersecurity Resolutions for 2025
12:32 : The ‘Worst in Show’ CES Products Put Your Data at Risk and Cause Waste, Privacy Advocates Say
12:32 : Ivanti Connect Secure zero-day exploited since mid-December (CVE-2025-0282)
12:21 : [NEU] [mittel] Linux Kernel: Mehrere Schwachstellen
12:21 : [NEU] [niedrig] Aruba Switch: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
12:20 : Japan Links 200 Cyberattacks To Chinese Hackers MirrorFace
12:20 : APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub
12:20 : From Silos to Synergy: Transforming Threat Intelligence Sharing in 2025
12:20 : India’s Growing Gaming Industry: Opportunities and Privacy Concerns
12:20 : MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan
12:20 : Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions
11:32 : The School Shootings Were Fake. The Terror Was Real
11:32 : WatchGuard Acquires ActZero
11:32 : Fortinet CISO Details ‘Phish-Free’ Phishing Scheme Using PayPal
11:19 : CMS: Updates stopfen Sicherheitslecks in Progress Sitefinity
11:19 : Sicherheitsupdates: Bridge und Switch von HPE Aruba Networking angreifbar
11:19 : heise-Angebot: iX-Workshop IT-Sicherheit: Angriffstechniken verstehen und erfolgreich abwehren
11:19 : [UPDATE] [hoch] Google Chrome: Schwachstelle ermöglicht Codeausführung
11:18 : Apple Says It Never Sold Recordings Made By Siri
11:18 : Cohere just launched ‘North’, its biggest AI bet yet for privacy-focused enterprises
11:18 : SOC Scalability: How AI Supports Growth Without Overloading Analysts
11:18 : Exploitation of New Ivanti VPN Zero-Day Linked to Chinese Cyberspies
11:18 : How to Secure Your Home Wi-Fi Network
11:18 : India Launches ‘Report and Check Suspect’ Feature to Combat Cybercrime
11:18 : Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection
11:18 : Government Launches £1.9m Initiative to Boost UK’s Cyber Resilience
11:5 : IT Security News Hourly Summary 2025-01-09 12h : 18 posts
10:32 : Green Bay Packers Store Hacked – Thousands of Credit Cards Data Stolen
10:32 : New Great Morpheus Hacker Group Claims Hacking Into Arrotex Pharmaceuticals And PUS GmbH
10:32 : Malicious Solana Packages Attacking Devs Abusing Slack And ImgBB For Data Theft
10:22 : SAP IDM vor dem Aus
10:22 : Managed Service Provider sollten Compliance-Checkbox-Falle vermeiden
10:22 : Kein Patch für Lücke in WordPress-Plug-in Fancy Product Designer in Sicht
10:22 : Google: Device Fingerprinting ist okay
10:22 : Spam-Schutz umgangen: 512-Bit-RSA-Key mit 8 US-Dollar in der Cloud geknackt
10:22 : [UPDATE] [mittel] Mozilla Thunderbird: Schwachstelle ermöglicht Path-Traversal Angriff
10:22 : [NEU] [hoch] Juniper JUNOS: Mehrere Schwachstellen ermöglichen Denial of Service und Informationsoffenlegung
10:22 : [NEU] [mittel] Drupal: Mehrere Schwachstellen
10:22 : [NEU] [mittel] GitLab: Mehrere Schwachstellen
10:22 : [UPDATE] [hoch] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
10:20 : Is this Website Safe: How to Check Website Safety – 2025
10:20 : It’s Time Businesses Address the UK’s Cybersecurity Talent Shortage
10:20 : Top 10 Data Loss Prevention (DLP) Tools for 2025
10:20 : Top Cybersecurity Conferences & Events in India 2025
10:20 : Critical Ivanti Zero-Day Exploited in the Wild
9:33 : Zero-Day-Lücke bedroht WordPress-Plug-in Fancy Product Designer
9:33 : [UPDATE] [mittel] jQuery: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
9:33 : [UPDATE] [mittel] Ruby: Mehrere Schwachstellen
9:33 : [UPDATE] [mittel] OpenSSL: Mehrere Schwachstellen
9:33 : [UPDATE] [mittel] OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
9:32 : Green Bay Packers Pro Shop Data Breach Compromises Customers
9:10 : Cyberangriff: Ukraine zerstört Netzwerk eines russischen Providers
9:9 : Research that builds detections
9:9 : Gitlab Patches Multiple Vulnerabilities Including Resource Exhaustion & User Manipulation
9:9 : AI Governance: Building Ethical and Transparent Systems for the Future
9:9 : Wireshark 4.4.3 released: Updated protocol support, bug fixes
8:32 : BreachLock Unified Platform provides visibility into the organization’s attack surface
8:32 : PowerSchool hacked, Cyber Force study, EC gets GDPR fine
8:14 : Mit Mindset die passenden Mitarbeitenden finden
8:14 : Vorhersagen der Kaspersky-Experten zu Cyberbedrohungen und Trends für 2025 | Offizieller Blog von Kaspersky
8:13 : Non-Human Identity Security Strategy for Zero Trust Architecture
8:13 : The ongoing evolution of the CIS Critical Security Controls
8:5 : IT Security News Hourly Summary 2025-01-09 09h : 5 posts
7:33 : Ivanti Connect Secure: Angreifer attackieren kritische Sicherheitslücke
7:32 : Synology ActiveProtect boosts enterprise data protection
7:17 : E-Mails sind out: Phishing verstärkt über Suchmaschinen
7:15 : Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit
7:15 : Palo Alto Networks Expedition Tool Vulnerability Let Attackers Access Cleartext Passwords
6:32 : Mitigating Risks with Privileged Access Management
6:32 : Optimizing Cloud Security with Advanced Secrets Scanning
6:18 : Wireshark 4.4.3 Released: What’s New!
6:18 : Ivanti 0-Day Vulnerability Exploited in Wild-Patch Now
6:18 : VIPRE Security Shares Cybersecurity Trends for 2025
6:18 : Ivanti Warns of Active Exploitation of a Vulnerability in Connect Secure
5:32 : Gravy Analytics data breach could put millions to data security risks
5:32 : State-aligned APT groups are increasingly deploying ransomware – and that’s bad news for everyone
5:32 : Japanese police claim China ran five-year cyberattack campaign targeting local orgs
5:32 : Sara: Open-source RouterOS security inspector
5:32 : GitLab CISO on proactive monitoring and metrics for DevSecOps success
5:32 : Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure
5:13 : Mirai Botnet Variant Exploits Zero-Day Vulnerabilities in Routers
5:13 : Researchers Reveal Exploitation Techniques of North Korean Kimsuky APT Group
5:5 : IT Security News Hourly Summary 2025-01-09 06h : 4 posts
4:32 : Japanese Police claim China ran five-year cyberattack campaign targeting local orgs
4:32 : What Makes You… You? A Philosophical Take on Non-Human Identity
4:32 : Cybersecurity in 2025: Global conflict, grown-up AI, and the wisdom of the crowd
4:13 : Japanese Police claim China ran five-year cyberattack campaign
2:9 : ISC Stormcast For Thursday, January 9th, 2025 https://isc.sans.edu/podcastdetail/9272, (Thu, Jan 9th)
2:9 : Examining Redtail Analyzing a Sophisticated Cryptomining Malware and its Advanced Tactics [Guest Diary], (Thu, Jan 9th)
2:9 : The US has a new cybersecurity safety label for smart devices
2:5 : IT Security News Hourly Summary 2025-01-09 03h : 4 posts
1:11 : The U.S. has a new cybersecurity safety label for smart devices
1:11 : I tried hard, but didn’t fix all of cybersecurity, admits outgoing US National Cyber Director
1:11 : Database tables of student, teacher info stolen from PowerSchool in cyberattack
1:11 : DEF CON 32 – Student Engagement Doesn’t Have to Suck
0:9 : Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation
0:9 : SonicWall warns of an exploitable SonicOS vulnerability
0:9 : I tried hard, but didn’t fix cybersecurity, admits outgoing US National Cyber Director
23:32 : Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways
23:32 : CISA Adds One Vulnerability to the KEV Catalog
23:11 : Fast Pace Health: Zero Phishing Incidents Since Harmony Email & Collaboration Implementation
23:5 : IT Security News Hourly Summary 2025-01-09 00h : 5 posts
22:55 : IT Security News Daily Summary 2025-01-08

Post navigation