Aktuelle Sicherheitsmeldungen
Hier finden Sie einen kontinuierlich aktualisierten Newsfeed mit relevanten Sicherheitsinformationen. Wir kuratieren für Sie Meldungen zu aktuellen Bedrohungen, neu entdeckten Schwachstellen und wichtigen Branchen-News aus ausgewählten und von uns geprüften internationalen Quellen.
- Device code phishing attacks surge 37x as new kits spread online (BleepingComputer)
- Friday Squid Blogging: Jurassic Fish Chokes on Squid (Schneier on Security)
- LinkedIn secretely scans for 6,000+ Chrome extensions, collects data (BleepingComputer)
- LinkedIn secretly scans for 6,000+ Chrome extensions, collects data (BleepingComputer)
- Hims & Hers warns of data breach after Zendesk support ticket breach (BleepingComputer)
- China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing (The Hacker News)
- Die Linke German political party confirms data stolen by Qilin ransomware (BleepingComputer)
- Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers (The Hacker News)
- Evolution of Ransomware: Multi-Extortion Ransomware Attacks (BleepingComputer)
- Microsoft still working to fix Exchange Online mailbox access issues (BleepingComputer)
- Company that Secretly Records and Publishes Zoom Meetings (Schneier on Security)
- UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack (The Hacker News)
- Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posture (The Hacker News)
- New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images (The Hacker News)
- Man admits to locking thousands of Windows devices in extortion plot (BleepingComputer)
- Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK (The Hacker News)
- Microsoft now force upgrades unmanaged Windows 11 24H2 PCs (BleepingComputer)
- CERT-EU: European Commission hack exposes data of 30 EU entities (BleepingComputer)
- Google Drive: Ransomware-Erkennung und Dateiwiederherstellung (heise security News)
- Desolate FCC-Vorgabe: „Freedom Router“ für US-Verbraucher (heise security News)
- Auslegungssache 156: Datenschutz-Dauerbrenner Microsoft 365 (heise security News)
- Claude Code leak used to push infostealer malware on GitHub (BleepingComputer)
- Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials (The Hacker News)
- Drift loses $280 million as hackers seize Security Council powers (BleepingComputer)
- Drift loses $280 million North Korean hackers seize Security Council powers (BleepingComputer)
- Drift loses $280 million as North Korean hackers seize Security Council powers (BleepingComputer)
- US Bans All Foreign-Made Consumer Routers (Schneier on Security)
- Residential proxies evaded IP reputation checks in 78% of 4B sessions (BleepingComputer)
- Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise (The Hacker News)
- EU-Kommission verbietet Top-Beamten Nutzung von Signal-Gruppen (heise security News)
- Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime (BleepingComputer)
- New Progress ShareFile flaws can be chained in pre-auth RCE attacks (BleepingComputer)
- Medtech giant Stryker fully operational after data-wiping attack (BleepingComputer)
- ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories (The Hacker News)
- Spielehersteller Hasbro: Einschränkungen nach IT-Vorfall (heise security News)
- Quantencomputer-Forscher: Bitcoin-Verschlüsselung in wenigen Jahren knackbar (heise security News)
- Bitcoin-Sicherheit: Quanten-Angriff effizienter als gedacht (heise security News)
- Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners (The Hacker News)
- The State of Trusted Open Source Report (The Hacker News)
- Critical Cisco IMC auth bypass gives attackers Admin access (BleepingComputer)
- Possible US Government iPhone Hacking Tool Leaked (Schneier on Security)
- XZ Utils 5.8.3: Sicherheitsupdate mit unklarem Risiko (heise security News)
- WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action (The Hacker News)
- Microsoft links Classic Outlook issue to email delivery problems (BleepingComputer)
- Over 14,000 F5 BIG-IP APM instances still exposed to RCE attacks (BleepingComputer)
- WhatsApp-Malware-Kampagne installiert Backdoors (heise security News)
- Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit (The Hacker News)
- Cisco stopft teils kritische Lücken in mehreren Produkten (heise security News)
- Bericht: Cyberkriminelle stehlen Quellcode von Cisco und dessen Kunden (heise security News)
- Bericht: Cyberkriminelle stehlen Cisco-Quellcode durch gestohlene Credentials (heise security News)