DE — heise online

heise Offer: Network Security in the Public Sector: Secure Architecture in Five Sessions

SecurityOctober 19, 20261 min read

heise academy is offering a five-part online course on securing networks in German government offices. It teaches how to map old networks, find risks, and plan a safer design.

What is the course?

The course is called "Netzwerksicherheit im öffentlichen Dienst". It teaches network and system admins how to study old government networks, judge their risks, and build a better target design. Experts cover the special needs of public offices, such as IT baseline protection, small staff numbers, and links to federal, state, and local networks.

Key facts and dates

The course has five sessions.
Each session lasts four hours, from 9:00 to 13:00.
Session dates: 18.11.26, 25.11.26, 02.12.26, 09.12.26, and 16.12.26.
Sessions are live and can be replayed later.

What the sessions cover

The course starts with mapping grown networks and splitting them into safe zones with firewalls. Later parts cover safe online services and remote access, and how to spot attacks using network data. The last part covers moving a data center, cloud links, SD-WAN, SASE, crypto-agility, and a plan for the next one to three years.

Why it matters

Many government networks grew over many years and were not built for today's threats or citizens' wish for easy digital services. This course gives a practical way to find weak spots and fix them step by step.

What to watch

Check the session dates: the course starts on 18.11.26.
Look at the academy Professional Pass if you want access to more classes and recordings.
Watch for the final before-and-after network plan, which shows how much a network can improve.

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

Security전자신문Oct 26

Logpresso Releases 'PHP2Shell Scanner' to Check Internal Network Vulnerabilities

Logpresso has released a 'PHP2Shell Scanner' app that diagnoses the PHP remote code execution vulnerabilities known as PHP2Shell. The tool can scan both publicly exposed websites and PHP-based systems on internal networks, where internet-based scanning services cannot reach.

SecurityVnExpressOct 26

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.