CrashStealer: New macOS Malware Poses as Apple's CrashReporter
The macOS malware CrashStealer disguises itself as Apple's CrashReporter and steals passwords, keychain data, and crypto wallets.
News & Knowledge
News, guides and insights on hosting, security and IT.
BSI Warns of Four Vulnerabilities in Bouncy Castle
The BSI warns of four vulnerabilities in the widely used Bouncy Castle crypto library. Updating to version 1.84 resolves them.
Windows Server 2022: Mainstream Support Ends in 90 Days
Mainstream support for Windows Server 2022 ends in around 90 days, leaving only security updates under extended support.
Securing SAP Systems: What Matters in 2026 for S/4HANA and Cloud Environments
The Onapsis 2026 SAP security checklist shows where organizations need to close gaps in patch management, identity controls, and cloud responsibility.
Legacyhive: Researcher Publishes Unpatched Windows Privilege Escalation Exploit
The zero-day exploit Legacyhive enables privilege escalation on all current Windows versions, with no patch available yet.
SSL Certificates: Shorter Lifetimes Force Automation
SSL certificate lifetimes are shrinking: 200 days from 2026, then 100, then 47. Manual renewal processes won't keep up. Here's what needs to change.
7-Zip: Vulnerability Allows Code Execution via Crafted Archives
A heap-based buffer overflow in 7-Zip's XZ-chunked data processing allows remote code execution, requiring only user interaction to trigger.
Microsoft Patch Tuesday July 2026: 622 CVEs, Two Actively Exploited Zero-Days
Microsoft's July 2026 Patch Tuesday closes 622 vulnerabilities, including two zero-days under active attack in AD FS and SharePoint, plus critical RCE flaws sc…
EU AI Act: More German Companies Affected Than Expected
The EU AI Act affects far more companies than expected, including those that only use AI features embedded in standard business software.