IT Nachrichten & Cyber-Radar

IT Security Nachrichten it-daily.net

Phishing über offizielle xAI-Einladungen entdeckt

Angreifer schleusten über eine HTML-Injection einen Phishing-Link in echte Team-Einladungen von xAI. Die Mails bestanden SPF, DKIM und DMARC.

IT Security Nachrichten The Hacker News

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization.

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

PHP2Shell: Notfall-Patch für zwei kritische PHP-RCE-Lücken ab 14:00 UTC

LONDON (IT BOLTWISE) – PHP schiebt heute einen außerplanmäßigen Security-Release nach, um zwei kritisch bewertete PHP-RCE-Lücken zu schließen.

IT Security Nachrichten IT Security News 2 Quellen

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.

IT Security Nachrichten Google Alert 2 Quellen

Microsoft bleibt häufigstes Ziel von Marken-Phishing - it-daily.net

Startseite/IT-Sicherheit/Cybercrime/Microsoft bleibt häufigstes Ziel von Marken-Phishing. Drittes Quartal 2026.

IT Security Nachrichten IT Security News 2 Quellen

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0.

IT Security Nachrichten BleepingComputer 2 Quellen

Stolen UpdraftCentral keys used to backdoor WordPress sites

A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral…

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[remote] South River Technologies Titan MFT Server 26.0.0 - code execution

South River Technologies Titan MFT Server 26.0.0 - code execution

Proof of Concept (PoC) Exploit-DB.com RSS Feed 2 Quellen

[remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

Proof of Concept (PoC) Exploit-DB.com RSS Feed 4 Quellen

[remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover

Keycloak 26.7.2 - Unauthenticated Account Takeover

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[webapps] Open eClass 3.15 - RCE

Linux Tipps & Hardening Linux, GNU/Linux, free soft…

Plex servers exploited to deploy cryptominers and a proxy backdoor

Plex servers affected by several vulnerabilities are being exploited to deploy cryptominers and a proxy backdoor.

Sicherheitslücken (CVE) IT Security News 2 Quellen

Wordfence Argus Discovers High Severity Unauthenticated PHP Object Injection in Duplicator

Wordfence Argus helped uncover CVE-2026-82814, a high-severity unauthenticated PHP object injection in Duplicator and Duplicator Pro.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-113703 | giuseppe99barchetta SuggestArr up to 2.x Authentication Middleware middleware.py enforce_authentication remote_addr improper authentication (EUVD-2026-105106)

A vulnerability marked as critical has been reported in giuseppe99barchetta SuggestArr up to 2.x.

IT Security Nachrichten Cybersecurity Blog 2 Quellen

Remote Access Security Risks: Why Corporate VPNs Fail on Public Wi-Fi

A remote access policy usually assumes the tunnel will come up.

Sicherheitslücken (CVE) CXSECURITY Database RSS Feed 2 Quellen

Kestra OSS Authentication Bypass Remote Code Execution v1.3.20

Topic: Kestra OSS Authentication Bypass Remote Code Execution v1.3.

IT Security Nachrichten Google Alert 2 Quellen

CDU Heilbronn: Hacker verschicken knapp 5000 Phishing-Mails über Parteikonto

Nach Bekanntwerden der Attacke übernahmen das Cybercrime-Zentrum und das Landeskriminalamt Baden-Württemberg die weiteren Nachforschungen.

IT Security Nachrichten Help Net Security

AOMEI Backupper servers hijacked for minutes at a time to push backdoor

An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security…

Sicherheitslücken (CVE) Cyber Security Advisories

A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files

A vulnerability has been discovered in BeyondTrust Remote Support that could allow for arbitrary upload of files.

IT Security Nachrichten IT Security News 2 Quellen

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned This…

IT Nachrichten Giga.de

Geld zurück von der Bank: Wer Opfer von Phishing ist, darf hoffen

(Bildquelle: imago / YAY Images / Bearbeitung: GIGA)Die Bank lässt euch auf dem Schaden sitzen? Das muss nicht sein.

Malware / Trojaner / Viren BleepingComputer

OVHcloud CLI releases backdoored on GitHub to steal developer secrets

French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to…