Heise Security News (alert)

• Remote-Access-Trojaner in npm-Paket mit 40.000 wöchentlichen Downloads gefunden (09.05.2025 08:23)
• Sicherheitslücken: F5 BIG-IP-Appliances sind an mehreren Stellen verwundbar (09.05.2025 08:00)
• Sonicwall: Hochriskante Lücken in SSL-VPN der SMA100-Reihe (09.05.2025 05:47)
• Mitel SIP-Phones lassen sich beliebige Befehle unterjubeln (08.05.2025 13:18)
• Sicherheitsupdates: Root- und DoS-Attacken auf Cisco-Produkte möglich (08.05.2025 08:21)
• Ubiquiti Unifi Protect: Kritisches Leck ermöglicht Codeschmuggel (08.05.2025 07:08)

CyberSecurityNews (The Hacker News)

• The Persistence Problem: Why Exposed Credentials Remain Unfixed—and How to Change That (12.05.2025 11:00)
• Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures (12.05.2025 07:26)
• Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection (10.05.2025 06:54)
• Germany Shuts Down eXch Over $1.9B Laundering, Seizes €34M in Crypto and 8TB of Data (10.05.2025 06:47)
• BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. - Dutch Operation (09.05.2025 16:28)
• OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities (09.05.2025 16:25)
• Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials (09.05.2025 11:40)
• Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business (09.05.2025 11:11)
• Beyond Vulnerability Management – Can You CVE What I CVE? (09.05.2025 10:57)
• Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials (09.05.2025 10:57)
• Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android (09.05.2025 07:13)
• Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell (09.05.2025 04:29)