Sicherheitslücken (CVE) BleepingComputer

New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google…

IT Security Nachrichten «Hacker News» 🗞️🦾 IT BOLTWI…

CISA setzt KEV-Frist: Cisco, Citrix und Fortinet müssen bis 12. Sept. patchen

LONDON (IT BOLTWISE) – Die US-Cybersicherheitsbehörde CISA hat drei als aktiv ausnutzbar eingestufte Schwachstellen in den Known Exploited…

IT Security Nachrichten «Hacker News» 🗞️🦾 IT BOLTWI…

CISA nimmt Cisco-, Citrix- und Fortinet-Lücken in KEV auf – Patch bis 12.09.2026

LONDON (IT BOLTWISE) – Die US-Cybersicherheitsbehörde CISA hat drei als ausnutzbar eingestufte Sicherheitslücken in den KEV-Katalog aufgenommen.

Sicherheitslücken (CVE) WinFuture News

Microsoft Defender: Frischer Zero-Day-Exploit umgeht neuesten Patch

Nur einen Tag nach Microsofts September-Patchday ist eine neue Zero-Day-Lücke in Microsoft Defender öffentlich geworden.

Sicherheitslücken (CVE) Hackers Online Club

Emergency Zero-Day Alert: ‘ShieldCrash’ Bypass Microsoft Defender Patch | Threat Hunting

HOC Shorts Critical Security Report: Exposed as ‘ShieldCrash‘ Bypasses Microsoft Defender just after release September 2026 Patch Tuesday.

Sicherheitslücken (CVE) Security Affairs

Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.

Sicherheitslücken (CVE) CyberScoop

Chinese espionage groups swarm to exploit triple-link chain of zero-days

Proofpoint researchers have spotted at least four state-aligned threat groups chain a trio of zero-day vulnerabilities to conduct espionage on…

IT Security Nachrichten Proofpoint News Feed

Chinese espionage groups swarm to exploit triple-link chain of zero-days

Sicherheitslücken (CVE) theregister.com

Serial Microsoft 0-day hunter drops yet another Defender exploit

Zero-day researcher Nightmare Eclipse, aka MSNightmare, published yet another Microsoft Defender proof-of-concept exploit for a zero-day dubbed…

IT Security Nachrichten Hackers Online Club

Microsoft September 2026 Patch Tuesday: Record 974 Flaws and 2 Zero-Days

HOC Shorts Microsoft has released its September 2026 Patch Tuesday security update, fixing a record-breaking 974 vulnerabilities and 2 Zero-days…

Sicherheitslücken (CVE) Security Affairs

Google fixes the seventh actively exploited Chrome zero-day of 2026

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code through a crafted HTML page.

Sicherheitslücken (CVE) heise online News

September-Patchday: Adobe schließt kritische Zero-Day-Lücke und 172 weitere

Im Zentrum der Adobe-Patch-Welle steht das Update für Adobe Commerce, das bereits akut angegriffen wird.

IT Security Nachrichten Malwarebytes

Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest…

Sicherheitslücken (CVE) The Hacker News

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google on Tuesday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild.

Sicherheitslücken (CVE) CyberInsider

Google fixes second actively exploited Chrome zero-day in under five days

Google has released Chrome 153 to the stable channel with fixes for 230 security vulnerabilities, including a V8 memory corruption flaw that Google…

Sicherheitslücken (CVE) Security Affairs

Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft Defender Zero-Day vulnerability.

Sicherheitslücken (CVE) Security Affairs

Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

September 2026 Patch Tuesday fixes a record 974 CVEs including 2 exploited zero-days, 20 wormable bugs, and a critical Exchange RCE via Visio email.

IT Security Nachrichten Security-Insider

Fast 1.000 Sicherheitslücken und ausgenutzte Zero-Days

Microsoft schließt mit dem September-Patchday rund 974 Sicherheitslücken, über 100 davon kritisch.

IT Security Nachrichten The Hacker News

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two…

Sicherheitslücken (CVE) CyberScoop

Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

Microsoft addressed 974 defects across its product suite, including two actively exploited zero-day vulnerabilities, in its monthly Patch Tuesday…

Sicherheitslücken (CVE) Cybersecurity Dive

N-able issues patch for zero-day flaw

Security researchers warned the company of unusual threat activity in a recently patched N-able environment.

Sicherheitslücken (CVE) The Hacker News

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under…

Sicherheitslücken (CVE) ZDI: Published Advisories

ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows.

IT Security Nachrichten Blog

September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

Sicherheitslücken (CVE) heise security Alerts

Zero-Day-Lücke StyleSmuggler in Magento und Adobe Commerce wird aktiv ausgenutzt

Onlineshops auf Basis von Magento und Adobe Commerce sind wegen einer Sicherheitslücke namens StyleSmuggler angreifbar.

IT Security Nachrichten The Hacker News

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text.

Sicherheitslücken (CVE) The Cyber Express

Attackers Exploit Unpatched Magento Zero-Day to Backdoor Online Stores

Attackers are exploiting an unpatched remote code execution flaw in Adobe Commerce and Magento Open Source to install persistent backdoors on…

Sicherheitslücken (CVE) SecurityWeek

Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores.

Sicherheitslücken (CVE) Help Net Security

N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)

N-able released an emergency hotfix for CVE-2026-86218, a remote code execution (RCE) flaw affecting N-central, its remote monitoring and management…

Sicherheitslücken (CVE) CyberInsider

Bimbo Bakeries confirms data stolen in Oracle EBS zero-day attack

Bimbo Bakeries USA has disclosed a data breach caused by the exploitation of an Oracle E-Business Suite (EBS) zero-day that allowed attackers to…

Sicherheitslücken (CVE) Golem.de

Über Zero-Day-Lücke: Angreifer schleusen Backdoor in Onlineshops ein

Hacker kompromittieren Onlineshops auf Basis von Magento über eine Sicherheitslücke. Sie schleusen Schadcode ein und platzieren eine Backdoor.

Sicherheitslücken (CVE) IT Security News

Magento and Adobe Commerce StyleSmuggler 0-Day RCE Actively Exploited in Attacks

Security researchers have discovered an actively exploited, unauthenticated remote code execution vulnerability affecting installations of Magento…

Sicherheitslücken (CVE) Cyber Security News

Hackers Exploit StyleSmuggler Magento and Adobe Commerce Zero-Day for Unauthenticated RCE

A newly disclosed actively exploited zero-day vulnerability in Magento and Adobe Commerce allows unauthenticated attackers to execute code remotely…

IT Nachrichten Borns IT- und Windows-Blog

"Style Smuggler": 0-Day in Magento / Adobe Commerce

Noch ein kleiner Nachtrag von letzter Woche: Betreiber eines Shops mit Magento oder Adobe Commerce stehen im Risiko. Zum 4.

Sicherheitslücken (CVE) Cyber Security News

Weekly Cybersecurity Newsletter Bulletin – CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and 20+ Stories

This edition of the weekly cybersecurity newsletter bulletin covers critical zero-day discoveries, nation-state router compromises, emerging…

Sicherheitslücken (CVE) IT Security News

IDScan sued over 153 million licence breach, FalconFlank zero-day hijacks CrowdStrike, Magento stores backdoored with no patch

Identity verification firm IDScan faces multiple lawsuits and investigations after hackers allegedly breached it.