BSI Warns of Four Vulnerabilities in Bouncy Castle
The BSI warns of four vulnerabilities in the widely used Bouncy Castle crypto library. Updating to version 1.84 resolves them.
Cybersecurity & Protection
All articles in the "Cybersecurity & Protection" category.
Legacyhive: Researcher Publishes Unpatched Windows Privilege Escalation Exploit
The zero-day exploit Legacyhive enables privilege escalation on all current Windows versions, with no patch available yet.
Securing SAP Systems: What Matters in 2026 for S/4HANA and Cloud Environments
The Onapsis 2026 SAP security checklist shows where organizations need to close gaps in patch management, identity controls, and cloud responsibility.
7-Zip: Vulnerability Allows Code Execution via Crafted Archives
A heap-based buffer overflow in 7-Zip's XZ-chunked data processing allows remote code execution, requiring only user interaction to trigger.
Microsoft Patch Tuesday July 2026: 622 CVEs, Two Actively Exploited Zero-Days
Microsoft's July 2026 Patch Tuesday closes 622 vulnerabilities, including two zero-days under active attack in AD FS and SharePoint, plus critical RCE flaws sc…
Samsung Android: Multiple Security Vulnerabilities Discovered
Multiple security vulnerabilities have been discovered in Samsung Android, enabling malicious code execution, security bypass, and the leaking of internal syst…
Chat Control: Which Messaging Apps Are Actually Secure
After the EU Parliament vote on Chat Control: which messaging apps use end-to-end encryption, which do not, and what Chat Control 2.0 would mean for users.
Ransomware Recovery: No Company Managed to Recover Within 24 Hours
None of the 750 companies surveyed recovered from a ransomware attack within 24 hours. Average recovery time: five days. Remote endpoints were the primary entr…
GhostApproval: Symlink Flaw Puts Popular AI Coding Agents at Risk
Wiz researchers discovered a vulnerability in six AI coding agents, dubbed GhostApproval: malicious repositories using symlinks can grant access to arbitrary s…