📰 IT Security

Apple startet iOS 26.7 für alle, die noch nicht auf iOS 27 wechseln

Apple veröffentlicht iOS 26.7 parallel zu iOS 27 und gibt iPhone-Nutzern damit die Wahl: Sicherheitsupdates für das bewährte System oder der Sprung…

Microsoft releases emergency Windows updates to fix RDS failures

Microsoft has released emergency out-of-band Windows updates to fix Remote Desktop Services failures caused by this month's security updates, along…

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government…

ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up

Frontier AI is compressing the attack lifecycle from vulnerability discovery to exploitation, forcing defenders to detect, patch and respond at…

A Visit to San Francisco's AI-run Store: No Customers, Nothing Useful, And Losing Money Fast

Previously Andon Labs handled the hardware and software integration for that AI-powered vending machine that went bankrupt after Wall Street Journal…

Microsoft 365 Passkey Phishing Turns Login Into a Cloud Breach

Microsoft warns that passkey-themed phishing is hijacking Microsoft 365 accounts, adding rogue MFA methods, and slowly stealing business cloud data.

Hacker missbrauchten Claude, um Geheimnisse aus 1,8 Millionen Android-Apps zu extrahieren

... Cyber-Security. Hacker missbrauchten Claude, um Geheimnisse aus 1,8 ... Wie das IT-Sicherheitsportal „BleepingComputer“ berichtet, nutzten ...

Bigfoot in the neural network.

NSA preps a major restructuring. Anthropic’s CEO calls for an AI slowdown. China acknowledges AI risks. RubyGems got swarmed by AI agents.

USN-8758-1: dracut vulnerability

It was discovered that dracut did not properly shell-quote messages written by the die() function to the emergency hook directory.

Gixy-Next v0.7.1

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition…

3BB-Angreifer nutzte MeshCentral als Backdoor für Root-Zugriff

THAILAND / LONDON (IT BOLTWISE) – Ein Angreifer soll sich im Netzwerk von 3BB, einem großen thailändischen Breitbandanbieter, mit Hilfe von…

CVE-2026-90562 | langbot-app LangBot up to 4.10.10 Password Recovery entropy (CNNVD-2026-91948344)

A vulnerability classified as problematic was found in langbot-app LangBot up to 4.10.10.

CVE-2020-15875 | LibreNMS up to 1.65.0 API Endpoint ajax_table.php searchPhrase sql injection (CNNVD-2026-92850483)

A vulnerability was found in LibreNMS up to 1.65.0. It has been declared as critical.

IT Security News Hourly Summary 2026-09-14 22h : 6 posts

6 posts published in the last hour 19:31Upcoming Speaking Engagements 19:02China Calls Amodei’s AI Proposal a New Cold War Playbook 19:02New hardware…

whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms

whitelist-bypass tunnels traffic through commercial video calls, for networks that allow only approved domains.

Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking

Multiple vulnerabilities have been discovered in MikroTik Routers, the most severe of which could allow for admin hijacking.

Homebrew 7.0.0 gets built-in GUI, better security controls

Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of…

CVE-2026-79379 | Bestechnic BES2300 Bluetooth Audio SoC firmware up to 4.x SBC_DecodeFrames buffer overflow

A vulnerability has been found in Bestechnic BES2300 Bluetooth Audio SoC firmware up to 4.x and classified as critical.

CVE-2026-69263 | FlowiseAI Flowise up to 3.1.2 MCP Server core.ts os command injection

A vulnerability classified as critical has been found in FlowiseAI Flowise up to 3.1.2.

CVE-2026-78971 | Halo up to 2.25.4 Plugin Management os command injection

A vulnerability was found in Halo up to 2.25.4. It has been classified as problematic.

CVE-2026-28659 | Google Android XR 14 Blobstore permission

A vulnerability described as problematic has been identified in Google Android XR 14. This affects an unknown function of the component Blobstore.

CVE-2026-49883 | Google Android 14/16/17 Permission Check PermissionsManager.java checkReadPermission permission

A vulnerability labeled as problematic has been found in Google Android 14/16/17.

CVE-2026-52307 | ClassCMS 5.6 Column Management Title cross site scripting

A vulnerability, which was classified as problematic, was found in ClassCMS 5.6. This affects an unknown part of the component Column Management.

CVE-2026-79573 | L-ONE 1.0.0 Attachment GetBusinessUploadList busid/id/taskid sql injection

A vulnerability classified as critical has been found in L-ONE 1.0.0.

CVE-2026-79577 | fangtang7 sso-master 1.0.0 Login /cas/login improper authentication

A vulnerability classified as critical has been found in fangtang7 sso-master 1.0.0.

CVE-2026-34223 | Siemens Desigo CC ClickOnce Client code injection

A vulnerability labeled as problematic has been found in Siemens Desigo CC ClickOnce Client, Desigo CC Flex Client, Desigo CC Installed Client and…

CVE-2026-69264 | FlowiseAI Flowise up to 3.1.2 CSVAgent validatePythonCodeForDataFrame csvFile os command injection

A vulnerability has been found in FlowiseAI Flowise up to 3.1.2 and classified as critical.

OpenAI stuck fighting Musk antitrust suit after Apple finds a way out

Elon Musk is seemingly done attacking Apple over its decision to integrate ChatGPT into iPhone features.

DDoS trifft Norwegens Storting: Russische Hacker sollen angreifen

LONDON (IT BOLTWISE) – Norwegens Parlamentsseite Storting war am Montag zeitweise nicht erreichbar.

Carmen Keller steuert Spitch-Marketing - IT&Production

... IT-Security, Wireless Technologie) · Automation und Robotik · Produktionsmanagement(z.B. ERP, APS, PPS, Instandhaltung) · Industrie 4.0 / IoT ...

DDoS-Angriff trifft Norwegens Storting-Website – Störzeiten dauern

LONDON (IT BOLTWISE) – Norwegens Parlamentswebsite wurde Ziel eines DDoS-Angriffs.

Google Alert – it security: Granig warns of "mafia-like" <b>IT</b> consultants in the country | krone.tv NEWS - YouTube

This $17 USB-C cable has a tiny screen that demystifies your charging speed

The Ugreen Nexode 240W USB-C cable combines premium build quality with a power meter and touchscreen display, and it costs under $25.

This $17 USB-C cable has a tiny screen that demystifies your charging speed

The Ugreen Nexode 240W USB-C cable combines premium build quality with a power meter and touchscreen display, and it costs under $25.

Angriffe auf öffentlich erreichbare Vite-Dev-Server: Hacker suchen AWS- und Azure-Geheimnisse

LONDON (IT BOLTWISE) – Eine groß angelegte Scanning-Kampagne zielt auf öffentlich erreichbare Vite-Entwicklungsserver.