/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}.signal-live-strip{display:flex;align-items:center;gap:.625rem;min-height:44px;margin-bottom:1rem;padding:.4rem .875rem;border-radius:9999px;border:1px solid rgba(var(--color-border-rgb,148,163,184),.35);background:rgba(var(--color-surface-rgb,15,23,42),.6);backdrop-filter:blur(12px) saturate(140%);overflow:hidden}.signal-live-badge{display:inline-flex;align-items:center;gap:.35rem;flex:0 0 auto;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.68rem;font-weight:700;letter-spacing:.08em;text-transform:uppercase;color:#fda4af}[data-bs-theme=light] .signal-live-badge,body.light .signal-live-badge{color:#be123c}.signal-live-dot{width:8px;height:8px;border-radius:50%;background:#f43f5e;animation:1.6s ease-in-out 0s infinite normal none running signalLivePulse}.signal-live-strip.is-online .signal-live-dot{background:#22c55e;animation:auto ease 0s 1 normal none running none}.signal-live-item{font-size:.82rem;line-height:1.35;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}.menue-widget .nav-tree-link{min-width:44px;display:flex;align-items:center;word-break:break-word;overflow-wrap:anywhere;max-width:100%;min-height:44px!important}.menue-widget .nav-title-text{overflow-wrap:anywhere;word-break:break-word}.menue-widget .menue-widget-btn{min-height:44px;min-width:44px;display:inline-flex;align-items:center;justify-content:center}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:auto ease 0s 1 normal none running none;transition:none}}.ticker-track{animation:auto ease 0s 1 normal none running none!important}.ticker-content{cursor:default}.signal-live-dot{animation:auto ease 0s 1 normal none running none}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}}@media (max-width:767.98px){.signal-live-strip{flex-wrap:wrap;align-items:flex-start;border-radius:1rem;padding:.5rem .75rem;row-gap:.25rem}.signal-live-badge{margin-top:.1rem}.signal-live-item{white-space:normal;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;text-overflow:clip;overflow-wrap:anywhere;line-height:1.3}} 🔒 Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups | Hacking & Pentesting – TSECURITY.DE

EILMELDUNGEN LIVE

Windows ServerMicrosoft und Copilot: CMA prüft Bündelung in fünf Marktsegmenten - ad-hoc-news.de(18.10.2026 um 01:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111865 | THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b AutoBackend Model Loading autobackend.py eval imgsz/names/kpt_shape eval injection (Issue 148 / EUVD-2026-103375)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111907 | thorsten phpMyFAQ up to 4.1.8 update-database cross-site request forgery (EUVD-2026-103313)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111909 | thorsten phpMyFAQ up to 4.1.8 /admin/api/user/delete deleteUser userId improper authorization (EUVD-2026-103311)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111908 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha improper authorization (EUVD-2026-103312)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111896 | thorsten phpMyFAQ 4.2.0-alpha SVG file SvgSanitizer cross site scripting (EUVD-2026-103323)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111895 | thorsten phpMyFAQ Microsoft Entra ID login flow AuthEntraId::create preferred_username improper authentication (EUVD-2026-103324)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111900 | thorsten phpMyFAQ up to 4.1.8/4.1.x Attachment attachment.php id improper authorization (EUVD-2026-103320)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111898 | thorsten phpMyFAQ up to 4.2.0-alpha /auth/keycloak/authorize improper authorization (EUVD-2026-103321)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111897 | thorsten phpMyFAQ 4.2.0-alpha Attachment Management record_id/attachment_id authorization (EUVD-2026-103322)(18.10.2026 um 02:45 Uhr)

•

Windows ServerMicrosoft und Copilot: CMA prüft Bündelung in fünf Marktsegmenten - ad-hoc-news.de(18.10.2026 um 01:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111865 | THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b AutoBackend Model Loading autobackend.py eval imgsz/names/kpt_shape eval injection (Issue 148 / EUVD-2026-103375)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111907 | thorsten phpMyFAQ up to 4.1.8 update-database cross-site request forgery (EUVD-2026-103313)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111909 | thorsten phpMyFAQ up to 4.1.8 /admin/api/user/delete deleteUser userId improper authorization (EUVD-2026-103311)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111908 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha improper authorization (EUVD-2026-103312)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111896 | thorsten phpMyFAQ 4.2.0-alpha SVG file SvgSanitizer cross site scripting (EUVD-2026-103323)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111895 | thorsten phpMyFAQ Microsoft Entra ID login flow AuthEntraId::create preferred_username improper authentication (EUVD-2026-103324)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111900 | thorsten phpMyFAQ up to 4.1.8/4.1.x Attachment attachment.php id improper authorization (EUVD-2026-103320)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111898 | thorsten phpMyFAQ up to 4.2.0-alpha /auth/keycloak/authorize improper authorization (EUVD-2026-103321)(18.10.2026 um 02:45 Uhr)

•

Sicherheitslücken (CVE)CVE-2026-111897 | thorsten phpMyFAQ 4.2.0-alpha Attachment Management record_id/attachment_id authorization (EUVD-2026-103322)(18.10.2026 um 02:45 Uhr)

•

Intelligence View

⚡ tsecurity.de Intelligence

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application…

Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 17.10.2026, 14:27 Uhr 1 Min. Lesezeit Cloud & IT-Enterprise

BeitragSeite↗ Quelle (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16, exposing risks associated with privileged vendor... Weiterlesen: Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, …

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

CTI Threat Relationship Graph

Akteure · Techniken · Beziehungen

2 Knoten · 1 Relationen

CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC

Powered by tsecurity.de Hub

🚀 Auf tsecurity.de entdecken

Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Noch keine Leser-Bewertungen

War diese Seite hilfreich?

Powered by tsecurity.de Hub

🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

◀ VORHERIGER BEITRAG 1 Min

CVE-2026-108441 | Microsoft Office heap-based overflow (EUVD-2026-102453)

Sicherheitslücken (CVE)

NÄCHSTER BEITRAG 1 Min

PEERSTITCH: Speicherresidentes ARM64-Implant nutzt Fortinet-Schwächen für covertes Tunneling

IT Security NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Zum Aktualisieren ziehen

Nächster Beitrag

🔥 LIVE PULSE

gerade eben

tsecurity.de Live Threat Radar

Aktuelle Bedrohungslagen & Sicherheits-Analysen

Quelle besuchen Jetzt ansehen