Live Threat Intelligence Feed Kategorie #3
IT Security

IT Security

Zentrales Informationsportal für Informationstechnologische Sicherheit. Echtzeit-Updates zu Bedrohungslagen, Risikomanagement, Zero-Trust und Enterprise Cyber Defense.

Artikel Heute
+0
7T: 0 gesamt
CVSS Ø Schwere
N/A
Kuratierte Schwachstellen
CISA KEV Status
0 Aktiv
Keine KEV-Hits (7T)
Top Vektoren & TTPs
#tools_tooling #malware #defense_soc #advisories_patching
Verifizierte Facetten
News-Deck swipen CVE Radar RSS XML Feed filtern
EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Windows Tipps & SecurityCould Windows 12 launch in 2027? It seems unlikely.(09.11.2026 um 12:25 Uhr)
•
Windows Tipps & SecurityHacker sollen Hunderttausende VWs tracken und im Innenraum mithören können(09.11.2026 um 12:37 Uhr)
•
Windows ServerM365 (Outlook, Hotmail) werfen seit 5.11.2026 SPF-Validierungsfehler - BornCity(09.11.2026 um 11:42 Uhr)
•
Video AnalysenThe Morpheus Tutorials: Wie viele Issues kriege ich für $2700 gefixt?(09.11.2026 um 12:02 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-46916 | Diebold Nixdorf Vynamic Security Suite up to 4.3.0 SR6 Delete Call /etc/rc.d/init.d/mountfs access control(09.11.2026 um 11:43 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-46917 | Diebold Nixdorf Vynamic Security Suite up to 4.3.0 SR1 /root integrity check(09.11.2026 um 11:43 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-38002 | Liferay Portal/DXP Workflow authorization (EUVD-2024-37060)(09.11.2026 um 11:43 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-36352 | AMD Ryzen 4000 Mobile Processors with Radeon Graphics AMD Graphics Driver untrusted pointer dereference (EUVD-2024-54970 / WID-SEC-2025-1770)(09.11.2026 um 11:57 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-48705 | Wavlink AC1200 M32A3_V1410_230602/M32A3_V1410_240222 adm.cgi set_sys_adm newpass command injection(09.11.2026 um 11:57 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-45433 | OpenSynergy BlueSDK up to 6.x control flow(09.11.2026 um 11:57 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Windows Tipps & SecurityCould Windows 12 launch in 2027? It seems unlikely.(09.11.2026 um 12:25 Uhr)
•
Windows Tipps & SecurityHacker sollen Hunderttausende VWs tracken und im Innenraum mithören können(09.11.2026 um 12:37 Uhr)
•
Windows ServerM365 (Outlook, Hotmail) werfen seit 5.11.2026 SPF-Validierungsfehler - BornCity(09.11.2026 um 11:42 Uhr)
•
Video AnalysenThe Morpheus Tutorials: Wie viele Issues kriege ich für $2700 gefixt?(09.11.2026 um 12:02 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-46916 | Diebold Nixdorf Vynamic Security Suite up to 4.3.0 SR6 Delete Call /etc/rc.d/init.d/mountfs access control(09.11.2026 um 11:43 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-46917 | Diebold Nixdorf Vynamic Security Suite up to 4.3.0 SR1 /root integrity check(09.11.2026 um 11:43 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-38002 | Liferay Portal/DXP Workflow authorization (EUVD-2024-37060)(09.11.2026 um 11:43 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-36352 | AMD Ryzen 4000 Mobile Processors with Radeon Graphics AMD Graphics Driver untrusted pointer dereference (EUVD-2024-54970 / WID-SEC-2025-1770)(09.11.2026 um 11:57 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-48705 | Wavlink AC1200 M32A3_V1410_230602/M32A3_V1410_240222 adm.cgi set_sys_adm newpass command injection(09.11.2026 um 11:57 Uhr)
•
Sicherheitslücken (CVE)CVE-2024-45433 | OpenSynergy BlueSDK up to 6.x control flow(09.11.2026 um 11:57 Uhr)
•
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
819.740 Meldungen
Spezifische Bereiche: Alle IT Security (819.740) IT Security Nachrichten ↗ IT Security Tools ↗ IT Security Video ↗ Hacking & Pentesting ↗ Malware / Trojaner / Viren ↗ Podcasts & Audio Briefings ↗
🚨
IBM • CVE-2026-18836
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
Advisory ansehen ➔
LIVE …
Alle (819.740) 0-Days Critical ≥ 9.0 CISA KEV Exploit / PoC 24h Trends Videos Podcasts Tools Interaktion
Neueste Wichtigste Signale
819.740 Meldungen
Plattformweite Suche ↗

Heute

1 weitere Quelle
darkreadinggeplant am 12.11.[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
2 weitere Quellen
CyberInsidervor 33 Min.SEGA says 2.2 million user email addresses leaked in vendor breachSecurityWeekvor 1 Std.Over 3 Million People Hit by Frontline Education Data Breach
IT Security Nachrichten IT Security News

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass…

🛡️ CVE-2026-19868 High 7.5 KEV ACTIVE Kat #Workaround / Mitigation 95%
vor 40 Min. 1 Min
0
Weiterlesen
1 weitere Quelle
GBHackers Securityvor 51 Min.Hackers Use New Lindnor Backdoor to Target Microsoft SQL Servers in Anubis Ransomware Attack
1 weitere Quelle
infosecurity-magazine.comvor 1 Std.Crédit Mutuel Arkéa Targeted in Reported $133m Heist
IT Security Nachrichten IT Security News

Operation Snowball Exposes AI Hacking Campaign Targeting European Telecom and 13 Hosted Organizations

An exposed open directory revealed an autonomous AI intrusion harness that spent more than two weeks attacking a European telecom provider and 13…

Cloud & IT-Enterprise Hacking & Pentesting 77%
vor 1 Std. 1 Min
0
Weiterlesen
1 weitere Quelle
GBHackers Securityvor 1 Std.Operation Snowball Exposes AI Hacking Campaign Targeting European Telecom and 13 Hosted Organizations
️ Threat Hunter Status-Update verfassen
Community Stream
News-Deck IT Security 📖 0 · ⏭ 0 · 🗳️ 0

Karten werden geladen …

Hoch = in der Vorschau lesen · Rechts = vor · Links/Runter = zurück · Enter/Karte tippen = Vorschau · V = Voting

Auto-Newslider · Slider
Wechsel alle
Sichtbare Karten

Automatischer Newslider: Pfeiltasten links und rechts blättern, Automatik pausiert bei Fokus und Wischgesten

Live-Signalstrom 0 Signale
Warte auf die ersten Signale …
Quellen-Ansicht 24 Quellen

Aggregiert über die letzten 14 Tage dieser Kategorie (inkl. Unterkategorien).

«Hacker News» 🗞️🦾 IT BOLTWISE® 165
Letzter Beitrag: 09.11.2026 um 12:05 Uhr
Meldungen zeigen (5)
Chaos Computer Club - last 100 ev… 52
Letzter Beitrag: 04.11.2026 um 00:00 Uhr
CrowdStrike 21
Letzter Beitrag: 04.11.2026 um 20:41 Uhr
RSS
BlackFog 17
Letzter Beitrag: 06.11.2026 um 20:47 Uhr
Check Point Blog 13
Letzter Beitrag: 06.11.2026 um 14:00 Uhr
Blog 8
Letzter Beitrag: 05.11.2026 um 07:00 Uhr
COMPUTER BILD 7
Letzter Beitrag: 05.11.2026 um 12:58 Uhr
CSS-Tricks 6
Letzter Beitrag: 05.11.2026 um 15:55 Uhr
ANY.RUN's Cybersecurity Blog 6
Letzter Beitrag: 05.11.2026 um 10:34 Uhr
AppleInsider News 5
Letzter Beitrag: 06.11.2026 um 15:26 Uhr
Borns IT- und Windows-Blog 5
Letzter Beitrag: 04.11.2026 um 10:17 Uhr
BASIC thinking 5
Letzter Beitrag: 02.11.2026 um 14:04 Uhr
AI Uncovered 4
Letzter Beitrag: 07.11.2026 um 01:34 Uhr
Blog Feed - Center for Internet S… 4
Letzter Beitrag: 06.11.2026 um 18:26 Uhr
Claude 4
Letzter Beitrag: 06.11.2026 um 18:03 Uhr
RSS
0 Artikel gemerkt
Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.
GLOBAL CTI GEO-RADAR
REFERENZ-LAGE
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
Kuratierte Akteur-Referenz (Threat-Landscape-Grundlage) — keine Live-Erfassung. Live-Lage: /cve · ATT&CK-Spalten im TTP-Radar.
DIFF:
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken