Heise Security-Alert

BSI Bund-Cert

• Information zur Umstellung beim Versand von Warnungen 1. April 2025
• Version 1.0: Kubernetes – Kritische Schwachstelle im Ingress NGINX Controller ermöglicht Clusterübernahme 25. März 2025
• Version 1.0: SonicWall SonicOS – Proof-of-Concept Exploit für Schwachstelle im SSLVPN veröffentlicht 31. Januar 2025
• Version 1.0: SonicWall SMA 1000 Serie – Zero-Day Schwachstelle in Management Konsole geschlossen 23. Januar 2025

Bruce Schneier

• Web 3.0 Requires Data Integrity 3. April 2025
  If you’ve ever taken a computer security class, you’ve probably learned about the three legs of computer security—confidentiality, integrity, and availability—known as the CIA triad. When we talk about a system being secure, that’s what we’re referring to. All are important, but to different degrees in different contexts. In a world populated by artificial intelligence (AI) systems […]
• Rational Astrologies and Security 2. April 2025
  John Kelsey and I wrote a short paper for the Rossfest Festschrift: “Rational Astrologies and Security“: There is another non-security way that designers can spend their security budget: on making their own lives easier. Many of these fall into the category of what has been called rational astrology. First identified by Randy Steve Waldman [Wal12], […]
• Cell Phone OPSEC for Border Crossings 1. April 2025
  I have heard stories of more aggressive interrogation of electronic devices at US border crossings. I know a lot about securing computers, but very little about securing phones. Are there easy ways to delete data—files, photos, etc.—on phones so it can’t be recovered? Does resetting a phone to factory defaults erase data, or is it […]
• The Signal Chat Leak and the NSA 31. März 2025
  US National Security Advisor Mike Waltz, who started the now-infamous group chat coordinating a US attack against the Yemen-based Houthis on March 15, is seemingly now suggesting that the secure messaging service Signal has security vulnerabilities. "I didn’t see this loser in the group," Waltz told Fox News about Atlantic editor in chief Jeffrey Goldberg, whom Waltz invited to the chat. […]