#DIESEC
LightNews LightNews
diesec.bsky.social
Based in the USA and wondering what DIESEC offers stateside? 🇺🇸
Our latest post breaks down how DIESEC INC supports American businesses — now from sunny Miami (not a retirement move 😄). German precision, US-ready security.

Read 👉 zurl.co/IqW9W

#Cybersecurity #USA
December 23, 2025 at 1:00 PM
Soweit sind wir, seitdem die a Grünen in der Bundesregierung sind und die Union in ihrem unvorstellbaren Hass auf diesec Partei und ihre Klientel alle demokratischen Hemmungen hat fallen lassen.
January 26, 2025 at 3:29 PM
diesec.bsky.social
🚨 DIESEC October Cybersecurity Round-Up 🚨
From breaches at Qantas, Gmail & Mango to new Microsoft + Azure vulnerabilities — here’s what shook the cyber world in October.

Read 👉 diesec.com/2025/11/october-2...

#Cybersecurity #InfoSec #DataBreaches
November 11, 2025 at 3:38 PM
diesec.bsky.social
🚨THE DIESEC NOVEMBER CYBERSECURITY ROUND-UP🚨

London councils, DoorDash, and The Washington Post hit by major breaches. Critical flaws found in Microsoft Visual Studio, Fortinet FortiWeb & Cisco ISE.

Full details 👉 zurl.co/DSzmy
#cybersecurity #databreach
December 8, 2025 at 1:00 PM
diesec.bsky.social
CVE-2026-59822 (CVSS 8.8): LiteLLM MCP proxy lets attackers skip OAuth2 login entirely, no credentials needed. First MCP flaw in CISA KEV. Exploited since Sep 1. Upgrade to v1.84.0+. Federal deadline: today.
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM
September 18, 2026 at 8:00 AM
diesec.bsky.social
New Windows Defender exploit "ShieldCrash" grants SYSTEM access on FULLY PATCHED systems, bypasses the fix Microsoft shipped days ago. No CVE, no patch yet. 5th Defender EoP bug from this researcher in 2026.
🇬🇧 diesec.com/2026/09/wind...
🇩🇪 diesec.com/de/2026/09/w...
#ZeroDay #cybersecurity #diesec
September 15, 2026 at 8:00 AM
diesec.bsky.social
974 CVEs. Two zero-days in the wild. One release.
TerminalFix hit Berlin's Senate before awareness training caught up.
4 espionage clusters shared the same Chrome+Windows exploit kit.

🇬🇧 diesec.com/2026/09/top-...
🇩🇪 diesec.com/de/2026/09/t...  

#Cybersecurity #DIESEC
September 11, 2026 at 8:00 AM
diesec.bsky.social
Patch applied → Exchange still running Pwn2Own chain.
MFA active → vishing bypassed it, 284M records gone.
AI tools ready → GitSpawn ran code first.
SonicWall CVSS 10. JFrog phantom key. Five gaps, one pattern.
🇬🇧 diesec.com/2026/09/top-...
🇩🇪 diesec.com/de/2026/09/t...
#cybersecurity #diesec
September 4, 2026 at 8:00 AM
diesec.bsky.social
Entra ID CVSS 10 — no patch to apply.
AI scripts → Siemens PLC memory/ladder logic.
GitLab → unauthenticated, exploited in minutes.
TrueConf → Head Mare, PhantomCore malware.
ShieldBreak → Defender patch bypassed. No fix.

🇬🇧 diesec.com/2026/08/top-...

#Cybersecurity #DIESEC
August 28, 2026 at 8:15 AM
diesec.bsky.social
A WordPress SSO plugin bug patched in July is being exploited in August — 6 of 7 paid editions got zero advisory. CVE-2026-61979 + CVE-2026-15981 (9.8): forge SAML, log in as admin.

🇬🇧 diesec.com/2026/08/mini...
🇩🇪 diesec.com/de/2026/08/m...

#WordPress #CyberSecurity #diesec #vulnerability
August 28, 2026 at 8:00 AM
diesec.bsky.social
Identity Theft in Germany: What SMEs Need to Know.
Germany's 2025 cybercrime damage: ~€202.4B (BKA). 80% of ransomware attacks hit SMEs (BSI). Germany = 82% of DACH incidents. The common thread: stolen credentials, not new exploits.
🇬🇧 diesec.com/2026/08/iden...
🇩🇪 diesec.com/de/2026/08/i...
#diesec
August 26, 2026 at 8:00 AM
diesec.bsky.social
Top 5 Cybersecurity News Stories August 21, 2026

vCenter path traversal
SharePoint JWT bypass
macOS Screen Sharing
MLflow SSRF
Cisco ASA

🇬🇧 zurl.co/2bXoP
🇩🇪 zurl.co/d6U4c

#Cybersecurity #DIESEC
August 21, 2026 at 8:00 AM
diesec.bsky.social
Germany's NIS2 grace period quietly expired July 31. A narrower AI Act rule landed Aug 2. Cyber extortion is up 91%. Three clocks, one stretched security team — what to prioritize first.

🇬🇧 zurl.co/XrLPV
🇩🇪 zurl.co/x8cyq

#NIS2 #CyberSecurity #Ransomware #AIAct #Mittelstand #DIESEC #InfoSec
August 19, 2026 at 8:00 AM
diesec.bsky.social
Lazarus blinds EDR via Windows kernel.
OT plant breached via shared private APN.
SAP e-commerce CVSS 10.0 — full rebuild required.
Metabase zero-day → CISA KEV → confirmed breaches.
N-able patch bypass — all MSP clients reachable.

Top 5 👇

🇬🇧 zurl.co/TMcTo
🇩🇪 zurl.co/XHPa1

#Cybersecurity #DIESEC
August 14, 2026 at 8:00 AM
diesec.bsky.social
5 ways SMEs can avoid cybersecurity buyer's remorse: start from real business risk, price the total cost of ownership, and don't let star ratings decide for you.

🇬🇧 zurl.co/RZLaq
🇩🇪 zurl.co/GafRu

#Cybersecurity #SMESecurity #DIESEC #InfoSec #SecurityProcurement
August 12, 2026 at 8:00 AM
diesec.bsky.social
AI agents breached real systems in UK evaluations.
COLDCARD RNG flaw → $89–116M Bitcoin gone.
Oracle DB used as OS command platform.
Hotel Wi-Fi DNS hijacked by APT29.
Passkeys extractable by malware via TPM APIs.

Top 5 👇

🇬🇧 zurl.co/7WZtd
🇩🇪 zurl.co/P5ZAF

#Cybersecurity #DIESEC
August 7, 2026 at 8:00 AM
diesec.bsky.social
CVSS 10.0: Ruflo's AI agent platform shipped with an unauthenticated management bridge open to the network by default. One HTTP request = stolen LLM keys + hijacked agents. CVE-2026-59726 "RufRoot". Patch to 3.16.3 now. 
zurl.co/SrOJJ
zurl.co/6ItUy

#diesec
August 5, 2026 at 8:00 AM
diesec.bsky.social
30 Minnesota water plants. Manual ops. July 2026.
TeamCity CVSS 9.8 unauth RCE. All pipeline creds.
Certighost: domain user → domain controller. PoC out.
NGINX: 15yr old pre-auth RCE. Cisco FMC KEV Jul 29.

Top 5

🇬🇧 zurl.co/Gai7P
🇩🇪 zurl.co/6X2oU

#Cybersecurity #DIESEC
July 31, 2026 at 8:00 AM
diesec.bsky.social
Iranian actors: PLC logic modified, HMI shows normal.
Check Point SmartConsole: unauth admin. CISA Jul 25.
SharePoint: machine keys stolen, valid post-patch.
ServiceNow: exploited Jul 18. Vendor: "no exploitation."

Top 5 👇

🇬🇧 zurl.co/kjpM4

#Cybersecurity #DIESEC
July 24, 2026 at 8:00 AM
diesec.bsky.social
Endpoint protection alone can't stop a stolen login from exposing your email, cloud apps, and CRM. Why SMEs need layered security — and how a modular platform makes it realistic.

🇬🇧 zurl.co/mEzi7
🇩🇪 zurl.co/MVofN

#Cybersecurity #DIESEC #SME
July 22, 2026 at 8:00 AM
diesec.bsky.social
ServiceNow CVE-2026-6875 (CVSS 9.5): unauth sandbox-escape RCE in AI Platform. Patched Jul 13, exploited in the wild since Jul 17. Vendor advisory still says no exploitation seen. Patch now, check your logs.

🇬🇧 zurl.co/kIfAo
🇩🇪 zurl.co/qKP5D

#DIESEC #CyberSecurity #CVE #ServiceNow
July 21, 2026 at 9:10 AM
diesec.bsky.social
SonicWall CVSS 10.0: unauth RCE, actively exploited.
Microsoft: 622 CVEs — SharePoint + AD FS zero-days in the wild.
SAP: CVSS 9.9 + credential from SAP docs.
GodDamn: signed driver kills EDR before encryption.

Top 5 👇

🇬🇧 zurl.co/RpiYZ
🇩🇪 zurl.co/6klOs

#Cybersecurity #DIESEC
July 17, 2026 at 12:00 PM
diesec.bsky.social
June 2026: a stolen OAuth token exposed a customer's CRM, ShinyHunters hit DentaQuest and Nottingham, and France's govt messaging app was hijacked. Plus 4 critical CVEs, including an actively exploited Cisco flaw.
🇬🇧 zurl.co/pZ9PA
🇩🇪 zurl.co/HNaCJ

#Cybersecurity #Ransomware #CVE #DIESEC
July 8, 2026 at 12:00 PM
diesec.bsky.social
Signal backup keys stolen (not the encryption).
SimpleHelp CVSS 10.0 — every MSP client exposed.
AI wrote working browser ransomware in an afternoon.
Mistic backdoor self-destructs before IR arrives.

This week's Top 5 👇

zurl.co/uSnL7

#Cybersecurity #DIESEC
July 3, 2026 at 12:00 PM
diesec.bsky.social
May 2026: ransomware hit pharma, a $1.1M phone scam hit a US city, ShinyHunters hit 7-Eleven, MuddyWater hit a South Korean tech firm. Plus 5 critical CVEs including a CVSS 10 in Azure DevOps.

🇬🇧 zurl.co/uNpWt
🇩🇪 zurl.co/eD9FP

#Cybersecurity #DIESEC
June 10, 2026 at 12:00 PM