What is Microsoft Entra (formerly Azure AD)?

VVS Stealer malware, a Python-based information thief, poses a growing cyber threat, particularly to corporate networks. Targeting Discord and browser data, this malware can easily scale and spread via channels like Telegram, creating new attack vectors that often go unnoticed by IT security teams. Organizations must gain control over their shadow IT and implement strategies like "Zero Trust" to mitigate this threat. ProSec offers support in implementing appropriate security measures.

The online shop of the Baden-Württemberg state government was hit by a cyberattack. The case study shows that vulnerabilities in standard commercial systems are crucial and that a systematic understanding of the "security supply chain" is necessary.

The article warns companies about the critical vulnerability "MongoBleed" in MongoDB. Over 11.500 vulnerable instances in Germany alone pose a significant risk to the financial stability and reputation of companies. Timely patch management and continuous vulnerability management could reduce this risk.