Ransomware Group Claims Attack on Deutsche Bank
The ransomware group "Unsafe" claims to have stolen data from Deutsche Bank. The bank points to a breach at an external service provider.
Cybersecurity & Protection
All articles in the "Cybersecurity & Protection" category.
Critical libssh2 Vulnerability Actively Exploited: What You Need to Do Now
CVE-2026-55200 in libssh2 is actively exploited: an attacker can run arbitrary code on a client by controlling the SSH server it connects to.
OpenSSH 10.4: Security Fixes and First Post-Quantum Signatures
OpenSSH 10.4 fixes multiple security issues in SFTP, SCP, and sshd, tightens protocol enforcement, and introduces experimental hybrid post-quantum signatures u…
16-Year-Old KVM Flaw Lets Attackers Break Out of VMs and Take Over Cloud Hosts
A 16-year-old use-after-free bug in KVM (CVE-2026-53359) lets attackers break out of VMs and take over cloud hosts.
Linux Kernel Flaw Lets Attackers Escalate to Root, Exploits Already Public
A Linux kernel flaw rated CVSS 7.8 can be exploited with publicly available code to gain root access, a patch is already available.
TencShell: The Backdoor Trojan That Disguises C2 Traffic as Tencent API Calls
Security researchers stopped a Go-based backdoor trojan that disguised its C2 traffic as Tencent API requests during a targeted attack on an industrial manufac…
ManageEngine AD360: Critical SSO Flaw Enables Account Takeover, Patches Available
A critical SSO flaw in ManageEngine AD360 (CVE-2026-11374) lets attackers hijack accounts; matching patches are available.
AI Coding Agents as Attack Vector: Malware via Seemingly Clean GitHub Repositories
Security researchers from Mozilla's 0din team have demonstrated how AI coding agents can be tricked into installing malware via inconspicuous GitHub repositori…
Critical Check Point VPN Vulnerability Actively Exploited
A actively exploited vulnerability in Check Point Remote Access VPN allows attackers to establish VPN sessions without authentication. The BSI classifies the s…