Security News

Malicious NPM Packages Target German Companies in Supply Chain Attack
2022-05-11 18:28

Cybersecurity researchers have discovered a number of malicious packages in the NPM registry specifically targeting a number of prominent companies based in Germany to carry out supply chain attacks. "Compared with most malware found in the NPM repository, this payload seems particularly dangerous: a highly-sophisticated, obfuscated piece of malware that acts as a backdoor and allows the attacker to take total control over the infected machine," researchers from JFrog said in a new report.

German automakers targeted in year-long malware campaign
2022-05-10 15:38

A years-long phishing campaign has targeted German companies in the automotive industry, attempting to infect their systems with password-stealing malware. These sites are used to send phishing emails written in German and host the malware payloads downloaded to targeted systems.

Serious Security: Darkweb drugs market Hydra taken offline by German police
2022-04-06 18:22

German police have located and closed down the servers of Hydra, allegedly one of the world's biggest underground online stores. According to a report from the BBC, locating the actual servers used to run Hydra was not an easy task, but German police said they started following up on a tip in the middle of 2021 that suggested the servers were actually hosted in Germany.

German Government Warns Against Using Russia's Kaspersky Antivirus Software
2022-03-16 01:20

Russian cybersecurity firm Kaspersky on Tuesday responded to an advisory released by Germany's Federal Office of Information Security against using the company's security solutions in the country over "Doubts about the reliability of the manufacturer." The statement from Kaspersky follows a warning from Germany's cybersecurity authority, the Bundesamt für Sicherheit in der Informationstechnik aka BSI, which recommended "Replacing applications from Kaspersky's portfolio of antivirus software with alternative products" due to risks that they could be exploited by Russia for a cyber attack.

German government advises against using Kaspersky antivirus
2022-03-15 14:15

Germany's Federal Office for Information Security, BSI, is warning companies against using Kaspersky antivirus products due to threats made by Russia against the EU, NATO, and Germany. Kaspersky is a Moscow-based cybersecurity and antivirus provider founded in 1997, that has a long history of success, but also controversy over the company's possible relationship with the Russian government.

Guide for comparison of cloud security solutions (German)
2022-02-16 00:00

In 2021, securing your network is more challenging than ever - you need to secure users, devices, apps, and data at the point of access, working at the cloud edge to deliver protection and performance. Your choice of cloud security platform and partner is key, as it will serve as a foundation for the way you grow and evolve to meet new challenges - for example, meeting the new standards defined by Gartner as part of their forward-thinking secure access service edge architecture.

Cyberattacker hits German service station petrol terminal provider
2022-02-01 15:50

Two companies owned by Hamburg-based company fuel group Marquard & Bahls are battling cyberattackers, with loading and unloading systems at the German arm of petrol tank terminal provider Oiltanking affected. The company this afternoon confirmed to The Register that Oiltanking GmbH's terminals - which provide Shell service stations, among others - are "Operating with limited capacity" and that Mabanaft GmbH had "Declared force majeure for the majority of its inland supply activities in Germany."

German petrol supply firm Oiltanking paralyzed by cyber attack
2022-02-01 12:27

Oiltanking GmbH, a German petrol distributor who supplies Shell gas stations in the country, has fallen victim to a cyberattack that severely impacted its operations. On Saturday, January 29th 2022, Oiltanking GmbH Group and Mabanaft GmbH & Co. KG Group discovered we have been the victim of a cyber incident affecting our IT systems.

German Court Rules Websites Embedding Google Fonts Violates GDPR
2022-02-01 03:09

A regional court in the German city of Munich has ordered a website operator to pay €100 in damages for transferring a user's personal data - i.e., IP address - to Google via the search giant's Fonts library without the individual's consent. The unauthorized disclosure of the plaintiff's IP address by the unnamed website to Google constitutes a contravention of the user's privacy rights, the court said, adding the website operator could theoretically combine the gathered information with other third-party data to identify the "Persons behind the IP address."

Tracking Secret German Organizations with Apple AirTags
2022-01-28 12:13

A German activist is trying to track down a secret government intelligence agency. Wittmann says that everyone she spoke to denied being part of this intelligence agency.