Sophos geht in einen aktuellen Bericht über die Auswirkungen des Fachkräftemangels im Bereich Cybersicherheit ein. Dem Report liegt eine umfangreiche Studie unter 5.000 IT-/Cybersecurity-Experten in 14 Ländern zugrunde. Er zeigt teils gravierende Auswirkungen auf kleine und mittlere Unternehmen (KMUs) beziehungsweise Unternehmen mit 100 bis 500 Mitarbeitern. Die wichtigsten Ergebnisse sind: KMUs sind unverhältnismäßig stark vom […]

The "Code-on-Toast" supply chain cyberattacks by APT37 delivered data-stealing malware to users in South Korea who had enabled Toast pop-up ads.

Researchers at Microsoft discovered a new macOS vulnerability, “HM Surf” (CVE-2024-44133), which bypasses TCC protections, allowing unauthorized access…

The European Union adopted a new law setting EU-wide cybersecurity requirements for connected devices to ensure their safety.

A new Gorilla Botnet has launched massive DDoS attacks, targeting over 100 countries, according to cybersecurity firm NSFOCUS.…

Hackers impersonate ESET in phishing attacks targeting Israeli organizations. Malicious emails, claiming to be from ESET, deliver wiper…

Microsoft researchers toyed with app permissions to uncover CVE-2024-44133, using it to access sensitive user data. Adware merchants may have as well.

The adoption of the email authentication and policy specification remains low, and only about a tenth of DMARC-enabled domains enforce policies. Everyone is waiting for major email providers to get strict.

A survey shows three-quarters of CISOs are drowning in threat detections put out by a sprawling stack of tools, yet still lack the basic visibility necessary to identify breaches.

The security firm is denying an assessment that its systems were compromised in Israel by pro-Palestinian cyberattackers, but acknowledged an attack on one of its partners.