Geek Guy

Month: June 2025

PowerShell überwachen – so geht‘s

Wird PowerShell nicht richtig überwacht, ist das Security-Debakel meist nicht weit. rsooll | shutterstock.com Kriminelle Hacker setzen mitunter auf raffinierte Techniken, um sich über ausgedehnte Zeiträume in den Netzwerken von Unternehmen einzunisten und still und heimlich sensible Daten oder Logins abzugreifen. Dabei missbrauchen die Cyberkriminellen in vielen Fällen auch vom jeweiligen Zielunternehmen freigegebene Tools, um…

News alert: SquareX research finds browser AI agents are proving riskier than human employees

Palo Alto, Calif., Jun. 30, 2025, CyberNewswire–Every security practitioner knows that employees are the weakest link in an organization, but this is no longer the case. SquareX’s research reveals that Browser AI Agents are more likely to fall prey … (more…) The post News alert: SquareX research finds browser AI agents are proving riskier than…

Best Software Composition Analysis (SCA) Tools: Top 6 Solutions in 2025

What you need to know about SCA tools Quick Answer: The top SCA tools in 2025 are Mend.io (best for automated remediation and proactive SCA), Sonatype Lifecycle (known for enterprise policy management), Snyk (known for developer experience), and Checkmarx SCA (known for comprehensive coverage). According to industry reports, organizations using SCA tools can reduce vulnerability…

Millennials vs. Gen X: How nostalgia, AI and Simify eSIM international data plans are shaping travel in 2025

Remember the days of flipping through a Lonely Planet guide to plan your travel itinerary, then printing out your flight details and writing down your hotel’s address just in case? That was Gen X travel. Fast-forward to 2025 and Millennials armed with smartphones and Simify eSIM international data plans are planning their trips with AI,…

Three steps to boost Amazon S3 data security

The amount of data in modern systems has skyrocketed beyond what traditional security tools can handle. As organizations embrace AI to boost productivity, security teams face mounting pressure to protect sensitive information across sprawling cloud infrastructures and applications. The velocity of data creation, combined with complex multicloud environments, makes traditional security approaches insufficient. AI systems introduce additional…

LinuxFest Northwest: See How Far COSMIC Has Come This Year

Authors/Presenters: Carl Richell (CEO And Founder, System76) Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel. Thanks…

U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix NetScaler vulnerability, tracked as CVE-2025-6543, to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2025-6543 (CVSS score of 9.2) is a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway when configured…

Skillsoft reports surge in learner growth and engagement as enterprises ‘accelerate technology skilling’

Global organisations and their workforces are relying on Skillsoft’s blended, interactive learning model to build critical technology skills COMPANY NEWS: Skillsoft (NYSE: SK), the platform that empowers organisations and learners to unlock their full potential, today announced a surge in learner growth and engagement alongside continued enterprise adoption of its technology skilling solution. With a…

Discovery Consulting Appoints SAP Manufacturing Expert Shobhit Garg to Lead Supply Chain Practice

COMPANY ANNOUNCEMENT:  Discovery Consulting, a leading provider of SAP solutions and digital transformation services, has announced the appointment of Shobhit Garg as the National Supply Chain Practice Lead. With more than 20 years of SAP experience spanning manufacturing, pharmaceuticals, mining, and discrete industries, Garg brings a wealth of domain and technical expertise to Discovery’s growing team.

Discovery Consulting Appoints SAP Manufacturing Expert Shobhit Garg to Lead Supply Chain Practice

COMPANY ANNOUNCEMENT:  Discovery Consulting, a leading provider of SAP solutions and digital transformation services, has announced the appointment of Shobhit Garg as the National Supply Chain Practice Lead. With more than 20 years of SAP experience spanning manufacturing, pharmaceuticals, mining, and discrete industries, Garg brings a wealth of domain and technical expertise to Discovery’s growing team.

Arrest, seizures in latest U.S. operation against North Korean IT workers

U.S. authorities unsealed indictments, seized financial accounts and made an arrest in the latest attempt to crack down on North Korean remote IT workers as part of a coordinated action that the Justice Department announced Monday. The workers obtained employment at more than 100 U.S. companies using stolen and fake identities, costing them millions in…

Escaping SOC Burnout: State of Security 2025

Michael Fanning, CISO at Splunk, shares insights on cybersecurity challenges highlighted in the Splunk State of Security report. Key issues include analyst burnout and alert fatigue, which persist over time. Fanning discusses how AI can improve efficiency and support analysts, emphasizing the need for better prioritization and event correlation in security operations to enhance effectiveness..…

Excite Cyber Provides Essential Tips to Medical Specialists Following the Leaking of Patient Data on the Dark Web

GUEST OPINION:  The recent leaking of private details of hundreds of patients including sensitive health information and Medicare numbers on the dark web following a cyberattack on a private specialist who works at the Epworth and Royal Melbourne hospitals highlights the importance of small medical practices and specialists taking proactive steps to ensure that their…

ASC X9 and DigiCert perform key ceremony creating a new cryptographic trust framework for modern enterprises

New X9 trust infrastructure offers independent alternative to browser-based security across all industries COMPANY NEWS: DigiCert, a leading global provider of digital trust, and the Accredited Standards Committee X9 (ASC X9) today announced the successful launch of the X9 Financial PKI production environment, marked by a formal key signing ceremony. This milestone activates the X9…

Fortinet named a leader in the 2025 Gartner® Magic Quadrant™ for Enterprise Wired and Wireless LAN Infrastructure for the second year in a row

COMPANY NEWS: Fortinet’s wired and wireless local area network (WLAN) solutions have long been integrated into the Fortinet Security Fabric, delivering a proven, artificial intelligence (AI)-powered platform that converges networking and security to reduce complexity, mitigate cyber risk, lower costs, and improve performance.

Dell’s Comprehensive Approach to AI and the Dell AI Factory

Artificial intelligence (AI) is disrupting every industry, promising unprecedented innovation and efficiency. But that power requires responsibility, especially in the realm of cybersecurity. As businesses race to adopt AI, the question isn’t just how to implement it, but how to implement it securely. Dell Technologies is at the forefront of this challenge, championing a proactive..…

Video: Descope Reinvents Customer Identity and Access Management with Secure Drag-and-Drop Solution

In this episode of Partner POV, sponsored by AWS, host Katie Bavoso dives into how Descope is revolutionizing customer identity and access management (CIAM) with a drag-and-drop platform that makes security seamless and user-friendly. Guest Rishi Bhargava, Co-Founder of Descope, is joined by Katherine Walther, Vice President of Innovation at MSP and Descope channel partner…

U.S. Agencies Warn of Rising Iranian Cyberattacks on Defense, OT Networks, and Critical Infrastructure

U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber-attacks from Iranian state-sponsored or affiliated threat actors.  “Over the past several months, there has been increasing activity from hacktivists and Iranian government-affiliated actors, which is expected to escalate due to recent events,” the agencies said. “These cyber actors often

HPE, Juniper Settle With DOJ to Move Forward With Acquisition

The long, arduous journey for Hewlett-Packard Enterprise’s (HPE) acquisition of Juniper Networks is coming to a close, after reaching an agreement with the U.S. Department of Justice (DOJ).  Settlement clears blockbuster acquisition pending final approval Pending court approval, the agreement with the DOJ clears the way for the transaction to close, ending a months-long saga…

HPE, Juniper Settle With DOJ to Move Forward With Acquisition

The long, arduous journey for Hewlett-Packard Enterprise’s (HPE) acquisition of Juniper Networks is coming to a close, after reaching an agreement with the U.S. Department of Justice (DOJ).  Settlement clears blockbuster acquisition pending final approval Pending court approval, the agreement with the DOJ clears the way for the transaction to close, ending a months-long saga…

HPE, Juniper Settle With DOJ to Move Forward With Acquisition

The long, arduous journey for Hewlett-Packard Enterprise’s (HPE) acquisition of Juniper Networks is coming to a close, after reaching an agreement with the U.S. Department of Justice (DOJ).  Settlement clears blockbuster acquisition pending final approval Pending court approval, the agreement with the DOJ clears the way for the transaction to close, ending a months-long saga…

IDEMIA secure transactions and Infineon Technologies unveil a strategic partnership dedicated to the future of automotive industry

IDEMIA Secure Transactions, a global leader in payment and connectivity solutions, and Infineon Technologies AG, a global semiconductor leader in power systems and IoT, have announced a first-of-its-kind strategic partnership to tackle the challenges of the new era of car access. In a move that reflects the accelerating shift toward digital-first mobility, this collaboration will…

Fake Receipt Detector Technology: Protecting Financial Integrity in the Digital Age

The rise of sophisticated digital tools and artificial intelligence has revolutionized many aspects of business and finance, but it has also created new opportunities for fraudulent activities. Among the most concerning developments is the increasing prevalence of fake receipts and fraudulent expense documentation. As businesses, insurance companies, and financial institutions grapple with these challenges, the…

Open AI to review compensation after Meta poaches several researchers

Following reports that Meta had hired away prominent researchers from OpenAI — in some cases offering $100 million — the company is now saying it will review compensation. According to Wired, OpenAI’s management reportedly told employees they will not stand by and watch this happen. In a Slack message to staff, OpenAI’s chief scientist, Mark…

Open AI to review compensation after Meta poaches several researchers

Following reports that Meta had hired away prominent researchers from OpenAI — in some cases offering $100 million — the company is now saying it will review compensation. According to Wired, OpenAI’s management reportedly told employees they will not stand by and watch this happen. In a Slack message to staff, OpenAI’s chief scientist, Mark…

Milestone Systems Accelerates Channel Growth in South Pacific with New Leadership and Partner Program Enhancements

Global video technology leader Milestone Systems has announced an ambitious new chapter of growth in the South Pacific region, unveiling plans to expand its partner ecosystem and strengthen distribution capabilities. As part of this strategy, Milestone has promoted Matt Veenstra to the role of Distribution Channel Manager, South Pacific, to lead partner engagement and growth…

Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

Europol on Monday announced the takedown of a cryptocurrency investment fraud ring that laundered €460 million ($540 million) from more than 5,000 victims across the world. The operation, the agency said, was carried out by the Spanish Guardia Civil, along with support from law enforcement authorities from Estonia, France, and the United States. Europol said…

How Super Funds can catch up with APRA’s guidelines

GUEST OPINION:  In recent months, the Australian Prudential Regulation Authority (APRA) has intensified its focus on cyber resilience across the superannuation sector, following a series of breaches that exposed significant weaknesses in identity and access management. In one publicly reported incident, a credential-stuffing attack led to the theft of $750,000 from member accounts, triggering broader scrutiny.

Going Beyond the Hype of DPDPA Compliance: Are You Breach Ready?

The Digital Personal Data Protection Act (DPDPA) marks a turning point for data privacy in India. Passed in 2023, the Act establishes a clear framework for the collection, processing, storage, and protection of personal data. For enterprises, it signals a deeper shift in how data responsibilities are assigned, and how businesses must be structured to…

Going Beyond the Hype of DPDPA Compliance: Are You Breach Ready?

The Digital Personal Data Protection Act (DPDPA) marks a turning point for data privacy in India. Passed in 2023, the Act establishes a clear framework for the collection, processing, storage, and protection of personal data. For enterprises, it signals a deeper shift in how data responsibilities are assigned, and how businesses must be structured to…

Going Beyond the Hype of DPDPA Compliance: Are You Breach Ready?

The Digital Personal Data Protection Act (DPDPA) marks a turning point for data privacy in India. Passed in 2023, the Act establishes a clear framework for the collection, processing, storage, and protection of personal data. For enterprises, it signals a deeper shift in how data responsibilities are assigned, and how businesses must be structured to…

AI Tools Transforming Business Operations in 2025

The AI revolution has reached a critical turning point, with 78% of organizations now using AI in at least one business function. This comprehensive guide examines the most impactful AI tools reshaping business in 2025, featuring emerging platforms like LogicBalls that are democratizing access. The post AI Tools Transforming Business Operations in 2025 appeared first…

AI Tools Transforming Business Operations in 2025

The AI revolution has reached a critical turning point, with 78% of organizations now using AI in at least one business function. This comprehensive guide examines the most impactful AI tools reshaping business in 2025, featuring emerging platforms like LogicBalls that are democratizing access. The post AI Tools Transforming Business Operations in 2025 appeared first…

AI Tools Transforming Business Operations in 2025

The AI revolution has reached a critical turning point, with 78% of organizations now using AI in at least one business function. This comprehensive guide examines the most impactful AI tools reshaping business in 2025, featuring emerging platforms like LogicBalls that are democratizing access. The post AI Tools Transforming Business Operations in 2025 appeared first…

PCI SSC Releases Version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard 

The PCI Security Standards Council (PCI SSC) has released version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard, introducing important clarifications and updates based on industry feedback. P2PE v3.2 is a minor revision of the standard, which expediently addresses stakeholder feedback while the Council continues developing the next major version – P2PE v4.0. All previously…

PCI SSC Releases Version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard 

The PCI Security Standards Council (PCI SSC) has released version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard, introducing important clarifications and updates based on industry feedback. P2PE v3.2 is a minor revision of the standard, which expediently addresses stakeholder feedback while the Council continues developing the next major version – P2PE v4.0. All previously…

PCI SSC Releases Version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard 

The PCI Security Standards Council (PCI SSC) has released version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard, introducing important clarifications and updates based on industry feedback. P2PE v3.2 is a minor revision of the standard, which expediently addresses stakeholder feedback while the Council continues developing the next major version – P2PE v4.0. All previously…

PCI SSC Releases Version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard 

The PCI Security Standards Council (PCI SSC) has released version 3.2 of the PCI Point-to-Point Encryption (P2PE) Standard, introducing important clarifications and updates based on industry feedback. P2PE v3.2 is a minor revision of the standard, which expediently addresses stakeholder feedback while the Council continues developing the next major version – P2PE v4.0. All previously…

Scattered Spider nimmt Luftfahrtbranche ins Visier

Scattered Spider nutzt Social Engineering statt Brute Force um sich Zugang zu verschaffen. VZ_Art – shutterstock.com Die Cybersecurity-Anbieter Mandiant und Palo Alto Networks sowie das FBI warnen vor zunehmenden Cyberangriffen der Hackergruppe „Scattered Spider“ auf den Luftfahrtsektor. Einen Name machte sich die Bande bereits unter anderem durch Angriffe auf die großen britischen Einzelhändler Marks&Spencer, Harrods…

Scattered Spider nimmt Luftfahrtbranche ins Visier

Scattered Spider nutzt Social Engineering statt Brute Force um sich Zugang zu verschaffen. VZ_Art – shutterstock.com Die Cybersecurity-Anbieter Mandiant und Palo Alto Networks sowie das FBI warnen vor zunehmenden Cyberangriffen der Hackergruppe „Scattered Spider“ auf den Luftfahrtsektor. Einen Name machte sich die Bande bereits unter anderem durch Angriffe auf die großen britischen Einzelhändler Marks&Spencer, Harrods…

Scattered Spider nimmt Luftfahrtbranche ins Visier

Scattered Spider nutzt Social Engineering statt Brute Force um sich Zugang zu verschaffen. VZ_Art – shutterstock.com Die Cybersecurity-Anbieter Mandiant und Palo Alto Networks sowie das FBI warnen vor zunehmenden Cyberangriffen der Hackergruppe „Scattered Spider“ auf den Luftfahrtsektor. Einen Name machte sich die Bande bereits unter anderem durch Angriffe auf die großen britischen Einzelhändler Marks&Spencer, Harrods…

The Best Email Security Companies: Rankings and Reviews

The Best Email Security Companies: Rankings and Reviews Choosing an email security provider shouldn’t be this complicated. The market for email security vendors can be overwhelming. We get it. You’ve got AI-driven platforms, secure email gateways (SEGs), and bold claims from every vendor promising to stop phishing, business email compromise (BEC), and ransomware. So how…

The Best Email Security Companies: Rankings and Reviews

The Best Email Security Companies: Rankings and Reviews Choosing an email security provider shouldn’t be this complicated. The market for email security vendors can be overwhelming. We get it. You’ve got AI-driven platforms, secure email gateways (SEGs), and bold claims from every vendor promising to stop phishing, business email compromise (BEC), and ransomware. So how…

The Best Email Security Companies: Rankings and Reviews

The Best Email Security Companies: Rankings and Reviews Choosing an email security provider shouldn’t be this complicated. The market for email security vendors can be overwhelming. We get it. You’ve got AI-driven platforms, secure email gateways (SEGs), and bold claims from every vendor promising to stop phishing, business email compromise (BEC), and ransomware. So how…