The Heinlein Group says its platforms do not use PHP in their core backend components. This removes the specific attack path posed by the current PHP vulnerabilities, but does not amount to a general security guarantee. The critical PHP vulnerabilities known as...
Cyber Security
PHP2Shell: The Risk Lies in the Runtime
Two vulnerabilities in the PHP core may allow unauthenticated remote code execution. Patches are available and initial attack attempts have been reported. Organisations now face a broader test: can they identify every exposed PHP system, including instances embedded...
Commentary: Security over availability: Baden-Württemberg takes decisive action
If a critical vulnerability could allow malicious code to be executed remotely, the availability of a website becomes a secondary concern. Baden-Württemberg has therefore taken the precautionary measure of taking affected websites and web systems belonging to the...
Criminal Networks Cross Borders. Europe’s Security Agencies Must Move Faster.
Commentary | Security in the Alpine Region: Bavaria is stepping up its response to cross-border organised crime, strengthening cooperation with Austria and Italy's South Tyrol region. The implications extend far beyond southern Germany. Europe's transport corridors...
When AI Starts Acting: Why Enterprises Need to Rethink Security Architecture
AI agents are evolving from digital assistants into active components of enterprise IT. They can operate applications, call APIs, modify files, develop software and increasingly perform security-related tasks. This fundamentally changes the risk profile: the critical...
Summary: MATCHBOIL: UAC-0099 refines its downloader
The Russia-linked group UAC-0099 is continuously developing its C# downloader, MATCHBOIL. An analysis by ESET shows how the malware has been gradually hardened against detection and analysis since 2024. The focus is on improved obfuscation, changing persistence...
MATCHBOIL: How a Russian-Aligned Access Tool Is Evolving — and Why It Matters Beyond Ukraine
The evolution of the MATCHBOIL downloader offers a detailed view of how sophisticated cyber-espionage operations mature over time. ESET researchers have reconstructed almost two years of development by the Russia-aligned threat group UAC-0099, documenting increasingly...
Microsoft Tightens Outlook Security by Blocking MSIX Attachments
Microsoft is adding MSIX and MSIXBundle files to Outlook’s default list of blocked attachment types. From November 2026, users of Outlook on the web and the new Outlook for Windows will no longer be able to open or download these files by default. The move highlights...
Cyber Resilience Begins Where Human Error Becomes Inevitable
Cybersecurity strategies do not fail solely because technology is inadequate. More often, the problem lies in security models that depend too heavily on people making the right decision every time. Kaseya’s 2026 Cybersecurity Report illustrates just how persistent...
Digital sovereignty is determined during the recovery process
Backup, recovery and digital sovereignty are often still regarded as separate disciplines within organisations. In an emergency, however, it becomes clear just how closely they are linked. Any organisation that, following a cyber-attack, is unable to determine for...
