News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Windows operating systems: Almost two million computers at risk
Windows operating systems: Almost two million computers at risk

There are no longer any updates for the Windows 7 and 8 operating systems. This means open security gaps and therefore worthwhile and easy targets for cybercriminals. In Germany, almost 640.000 computers still run these operating systems. “It is depressing when you see that despite years of information campaigns, millions of users still rely on outdated Windows operating systems. Because: Windows oldies pose immense dangers in everyday office life. Outdated Windows operating systems are easy targets for criminals. Over 1,8 million computers in Germany still have an operating system dinosaur installed. The end of support for Windows 7 was several years ago...

Read more

Critical security vulnerabilities in VMware
B2B Cyber ​​Security ShortNews

Security vulnerabilities have been discovered in some VMware products. The BSI classifies these vulnerabilities as critical. Among other things, the USB controllers in various devices are affected. A local attacker can exploit multiple vulnerabilities in VMware ESXi, VMware Workstation, VMware Fusion and VMware Cloud Foundation to execute arbitrary code, bypass security measures or disclose information, warns the BSI and recommends using updates as they become available. CVSS vulnerability scores range from 7,1 to 9,3. They are all classified as critical because they allow attackers to bypass virtual machines and access the…

Read more

More security holes in European software
More security vulnerabilities in EMEA software

Around 80 percent of applications developed in EMEA countries had at least one vulnerability. This is the result of the study “State of Software Security (SoSS) Report EMEA” by Veracode. EMEA also has the highest percentage of high-severity vulnerabilities among all regions. This means that if a vulnerability is exploited, a critical problem could arise in the respective application. Because a high number of errors and vulnerabilities in software code correlates with an increased security risk. So it's no surprise that cyberattacks on the software supply chain will hit the headlines in 2023...

Read more

Number of cyber attacks higher than ever
Number of cyber attacks higher than ever

Cyber ​​attacks on companies are increasing rapidly worldwide and reached a new high in the first half of 2023. Most attacks are aimed at the USA, but Germany is already in third place. An analysis by Forescout. In their latest report, experts from Forescout Vedere Labs analyzed the activities of cybercriminals and state-backed hackers in the first six months of 3. The results show an alarming increase in attacks on companies and organizations worldwide. 2023 percent more security gaps compared to 15 A total of over 2022...

Read more

Lack of incident response plans at German companies
Lack of incident response plans at German companies

German companies are ill-prepared for attacks. Almost 80 percent have no incident response plans. However, an emergency plan is almost always a prerequisite for taking out mandatory cyber insurance. The BKA recorded more than 130.000 cybercrime cases in Germany last year. Attacks on companies can sometimes threaten their existence. According to the current Kaspersky study, 30,5 percent of companies in Germany have cyber insurance that covers at least the most serious costs in the event of damage. Incident response needs improvement The topic of incident response or preparation for cyber attacks seems to still have room for improvement in companies in Germany,...

Read more

Ransomware Index Report identifies new vulnerabilities
Ransomware Index Report identifies new vulnerabilities

Groups of hackers continuously monitor new vulnerabilities and analyze their suitability for potential attacks. In March 2023, the total number of security breaches reported was higher than the previous three years combined. The Ransomware Index Report from Securin, Cyware and Ivanti provides a regular update on the latest threat vectors used for such attacks. He also gives suggestions on how companies can protect their data and assets from ransomware. In the first quarter of 2023, twelve new vulnerabilities were linked to ransomware. Three quarters of these were already in the 4th quarter…

Read more

SMEs: Reliably detect and fix security gaps
SMEs: Reliably detect and fix security gaps

One of the most dangerous and most commonly used attack vectors by cybercriminals are unpatched vulnerabilities. The innovative vulnerability and patch management from the IT security manufacturer ESET helps SMEs to identify and fix them. This solution supports organizations in reliably detecting and eliminating security gaps in their systems. If the software has identified vulnerabilities in operating systems or common applications, administrators can have the required patches installed automatically or act manually. The guidelines supplied simplify the work of those responsible and can be individually adapted. Numerous filter options allow vulnerabilities to be prioritized according to their severity. ESET Vulnerability & Patch…

Read more

2022: Scanners discover 2,3 billion vulnerabilities
2022: Scanners discover 2,3 billion vulnerabilities

Although thousands of vulnerabilities caused by CVEs are known, these have been found 2,3 billion times as vulnerabilities in companies and authorities worldwide. The 2023 TruRisk Research Report focuses on the 163 most critical or highly dangerous vulnerabilities and evaluates them. In its 2023 TruRisk Research Report, Qualys publishes interesting evaluations. The research report provides an overview of known security vulnerabilities found by Qualys in 2022 at companies and governments worldwide - more than 2,3 billion. The results of the investigation underscore the image of opportunistic attackers who are constantly changing their techniques in an agile manner in order to…

Read more

Chrome seals 7 highly dangerous gaps
B2B Cyber ​​Security ShortNews

Chrome's bug bounty program is worth it: programmers and specialists reported 7 highly dangerous vulnerabilities to Google and received a reward. Google also immediately provides the updates for users. Sole proprietorships and SMEs should be prepared to click one more time. The latest Chrome update contains 7 updates for high-risk vulnerabilities. In companies, the admins ensure that Chrome remains up to date. Individual companies and SMEs should definitely click in the help area - the further update happens automatically. Work PCs often run through and as long as the browser is not closed and restarted...

Read more

Critical vulnerabilities in Android 11, 12 and 13
B2B Cyber ​​Security ShortNews

Google shares on its Android Security Bulletin that there are two critical vulnerabilities in Android 11, 12, 12L and 13. If you have an Android device with current support, you should trigger the system update manually to check whether the March security update is already available for your device. In its Android Security Bulletin March 2023, Google informed about the critical vulnerabilities CVE-2023-20951 and CVE-2023-20954. Both serious vulnerabilities can lead to remote code execution without requiring additional execution permissions. No user interaction is required for use. If you have a device with current support, you should therefore check the system update to see if it…

Read more