•
IT NachrichtenWhy CIOs must prepare for hybrid quantum computing(30.10.2026 um 18:38 Uhr)
•
IT NachrichtenDEAL: Google Cuts $200 Off Pixel 11 Price(30.10.2026 um 19:14 Uhr)
•
IT NachrichtenThis Week in Tech: Apple Gets Touchy as AI Clocks In(30.10.2026 um 15:02 Uhr)
•••••
AI & KI NachrichtenMistral Releases 1-Trillion-Parameter AI Model for Cybersecurity(30.10.2026 um 17:10 Uhr)
•••
IT NachrichtenWhy CIOs must prepare for hybrid quantum computing(30.10.2026 um 18:38 Uhr)
•
IT NachrichtenDEAL: Google Cuts $200 Off Pixel 11 Price(30.10.2026 um 19:14 Uhr)
•
IT NachrichtenThis Week in Tech: Apple Gets Touchy as AI Clocks In(30.10.2026 um 15:02 Uhr)
•••••
AI & KI NachrichtenMistral Releases 1-Trillion-Parameter AI Model for Cybersecurity(30.10.2026 um 17:10 Uhr)
••
Cybersecurity News & Diskussionsportal
⚡ tsecurity.de Intelligence
3.618 Bildirimler
LIVE …
3.618 Bildirimler
33 "Malware için Hits" Feed Platform çapında arama ↗
Güvenli Programlama Cyber Security News

Fake Cloudflare Security Checks Trick Windows and Mac Users Into Running Malicious Commands

A newly observed ClickFix campaign uses fake Cloudflare verification pages to trick Windows and macOS users into running commands intended to…

Cloud & IT-Enterprise Sichere Programmierung 90%
vor 1 Tag 1 Min Open original source
0
Güvenli Programlama Cyber Security News

Hackers Plant Malicious Scripts in Magento Stores That Keep Running Even After Domain Blocks

Hackers have compromised 953 online stores, mostly running Magento, in a campaign that hides malicious JavaScript inside website content.

Sichere Programmierung 89%
vor 3 Tagen 1 Min Open original source
0
Güvenli Programlama DEV Community

LiteLLM 1.107.0 was malware. A 5-minute check for AI developers, and the one-line setting that would have skipped it

On October 21, 2026, a malicious litellm==1.107.0 was published to PyPI.

Sichere Programmierung 92%
vor 4 Tagen 1 Min Open original source
0
Güvenli Programlama Archive: 2026

GitHub package firewall in public preview

An increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations…

IT Nachrichten 75%
vor 10 Tagen 1 Min Open original source
0
Güvenli Programlama Post malware and hostile se…

[Tool/Release] Hermit: Interactive REPL & Structural Patcher for React Native's Hermes Bytecode (HBC)

I just released a complete REPL and static analysis framework for React Native Hermes bytecode (HBC).

Sichere Programmierung 90%
vor 19 Tagen 1 Min Open original source
0
Güvenli Programlama Post malware and hostile se…

🚨 Typosquatting packages on PyPI are targeting 𝗿𝗲𝗾𝘂𝗲𝘀𝘁𝘀, one of the most widely used Python packages. Catch them before compromise.

submitted by /u/ANYRUN-team [link] [comments]

Sichere Programmierung 95%
vor 1 Monat 1 Min Open original source
0
Güvenli Programlama Post malware and hostile se…

PDFs in Anna's Archive Containing Malicious Javascript?

I would say I am a bit paranoid now that I have learned a lot more about how threat actors can embed malicious code into PDFs and Word Docs and…

Sichere Programmierung 88%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama t3n.de

Windows-Sicherheit: Warum Antiviren-Programme die Sleepwalker-Backdoor übersehen

Gewöhnliche Schadprogramme verraten sich schnell durch verdächtige Netzwerkverbindungen.

Sichere Programmierung 90%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama dev.to

E4del / PINHOLE Using FTP Banners for Command Retrieval

1. Basic Information Article Title: FTP Banners: The New Dead Drop Resolver Delivering Novel RATs Publisher: SOCRadar Threat Research Unit…

IT Nachrichten 75%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama dev.to

TrueConf Server Exploitation: PhantomCore Delivered via CVE-2026-72529 / 72530

1. Basic Information Article Title: Head Mare APT Group exploits vulnerabilities in unpatched TrueConf server to deliver PhantomCore malware to…

🛡️ CVE-2026-72529 Critical 9.3 KEV ACTIVE KRITIS / Energie +1
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama dev.to

Three Russian-Linked Clusters Abuse Legitimate Authentication Flows

1. Basic Information Article Title: Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia Publisher: Google Threat…

IT Nachrichten 75%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama t3n.de

Neue Android-Malware kombiniert Fernzugriff und NFC für Kontodiebstahl in Echtzeit

Ein kurzer Anruf der vermeintlichen Hausbank kann der Beginn davon sein, dass euer Smartphone in ein Werkzeug für Kriminelle verwandelt wird.

Finanzwesen & Banking IT Security 80%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama dev.to

Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates

Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates 1.

KEV ACTIVE TA0001 · T1190 Cloud & IT-Enterprise Alle Kategorien 95%
vor 2 Monaten 11 Min Open original source
0
1 başka bir kaynak
dev.tovor 2 Monatenkhunt: SQL Injection to Resident Threat Inside Oracle Database Stealing Credentials with SYSTEM Privileges
Güvenli Programlama dev.to

RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration

RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration 1.

TA0001 · T1566 Cloud & IT-Enterprise IT Nachrichten 95%
vor 2 Monaten 11 Min Open original source
0
Güvenli Programlama dev.to

10 Signs Your Windows PC May Be Compromised and How to Monitor Them

Have you ever opened your Windows computer and noticed something strange? A program you do not remember installing.

TA0002 · T1059 IT Security Tools 95%
vor 2 Monaten 4 Min Open original source
0
Güvenli Programlama github.blog

How we took malware advisories beyond npm

GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built…

IT Nachrichten 95%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama dev.to

COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It

COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It 1.

TA0040 · T1486 Cloud & IT-Enterprise IT Nachrichten 95%
vor 2 Monaten 9 Min Open original source
0
Güvenli Programlama dev.to

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator `exec()` Chain

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator exec() Chain 1.

🛡️ CVE-2026-9198 Critical 9.8 KEV ACTIVE EPSS 28.7% TA0040 · T1486 +2
vor 2 Monaten 9 Min Open original source
0
Güvenli Programlama dev.to

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

I cleaned the infected packages. I deleted node_modules. I ran npm ci --ignore-scripts. Clean install, no lifecycle scripts. Done, right?

TA0011 · T1071 Cloud & IT-Enterprise Alle Kategorien 95%
vor 2 Monaten 7 Min Open original source
0
1 başka bir kaynak
dev.tovor 2 MonatenShai-Hulud Strikes Back: Keyv, Cacheable & 800+ npm Packages Hijacked in Massive Worm Attack
Güvenli Programlama dev.to

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages 1.

TA0001 · T1566 Cloud & IT-Enterprise IT Security Tools 95%
vor 2 Monaten 10 Min Open original source
0
1 başka bir kaynak
dev.tovor 2 MonatenKeyv Supply Chain Attack: What You Need to Know Now
Güvenli Programlama dev.to

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud 1.

TA0001 · T1566 Finanzwesen & Banking Cloud & IT-Enterprise IT Nachrichten 95%
vor 2 Monaten 8 Min Open original source
0
Güvenli Programlama dev.to

Day 17–Day 22: From Compliance to Command SOC — Building the Real Foundation of a Security Operations Center

Day 17 — Compliance & Regulatory Foundations in SOC When we talk about cybersecurity in enterprise environments, we are not just talking about…

TA0040 · T1486 KRITIS / Energie Gesundheitswesen Finanzwesen & Banking Cloud & IT-Enterprise IT Security Tools 95%
vor 2 Monaten 7 Min Open original source
0
Güvenli Programlama dev.to

I Point a Local LLM at Every Repo Before Opening It in My Editor

In May a "recruiter" sent me a take-home project for a Web3 role. Nice README, plausible Next.js structure, a real-sounding company.

IT Nachrichten 95%
vor 2 Monaten 6 Min Open original source
0
Güvenli Programlama dev.to

An LLM Attacked a Lab, Then Got Turned Around. That's Not the Scary Part.

A research lab says it got attacked by something built on or around a Chinese LLM, and instead of just blocking it, they flipped it and used it…

KRITIS / Energie IT Nachrichten 75%
vor 2 Monaten 4 Min Open original source
0
Güvenli Programlama dev.to

MITRE ATLAS now has agentic attack techniques

If you have ever worked with MITRE ATT&CK, you already know the shape of the thing: a structured, community-maintained catalog of how real attackers…

TA0010 · T1041 KRITIS / Energie Kat #Workaround / Mitigation 80%
vor 2 Monaten 5 Min Open original source
0
Güvenli Programlama dev.to

ollanode

Show HN: OllaDNS – An API-First DNS Security Platform Built for Developers Most DNS security tools are built around web dashboards.

TA0001 · T1566 IT Nachrichten 95%
vor 2 Monaten 3 Min Open original source
0
Güvenli Programlama dev.to

VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery

VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery 1.

TA0001 · T1190 Cloud & IT-Enterprise IT Nachrichten 95%
vor 2 Monaten 7 Min Open original source
0
Güvenli Programlama dev.to

N-central CVE-2026-18577: Lateral Movement from RMM Admin Rights to Customer Endpoints and Persistence via Cloudflare Tunnel

N-central CVE-2026-18577: Lateral Movement from RMM Admin Rights to Customer Endpoints and Persistence via Cloudflare Tunnel 1.

🛡️ CVE-2026-18577 High 8.2 KEV ACTIVE EPSS 14.6% TA0040 · T1486 +2
vor 2 Monaten 8 Min Open original source
0
Güvenli Programlama dev.to

CC-Link IE TSN CVE-2026-13584: OT Protocol Vulnerability Enabling Control I/O Value Tampering from Adjacent Networks

CC-Link IE TSN CVE-2026-13584: OT Protocol Vulnerability Enabling Control I/O Value Tampering from Adjacent Networks 1.

🛡️ CVE-2026-13584 High 7.1 KRITIS / Energie Cloud & IT-Enterprise IT Nachrichten 95%
vor 2 Monaten 6 Min Open original source
0
Güvenli Programlama dev.to

DOUBLECUP: ClickFix Loader-as-a-Service Restoring Fileless Payload from PNG in Browser Cache

DOUBLECUP: ClickFix Loader-as-a-Service Restoring Fileless Payload from PNG in Browser Cache 1.

TA0002 · T1059 Cloud & IT-Enterprise IT Security Nachrichten 95%
vor 2 Monaten 7 Min Open original source
0
Güvenli Programlama heise.de

Neue Malware-Welle: Arch Linux blockiert AUR-Updates

Erneut verbreitet sich Malware über Arch User Repositorys. Daher gibt es vorerst überhaupt keine Updates für AUR.

IT Nachrichten 75%
vor 2 Monaten 1 Min Open original source
0
Güvenli Programlama dev.to

AI made novel exploits cheap. Your signature stack didn't get the memo.

In October 2024 a Google research agent called Big Sleep read the SQLite source and found a memory-safety bug no human had reported.

EPSS 73.5% TA0040 · T1486 Cloud & IT-Enterprise IT Nachrichten 95%
vor 3 Monaten 6 Min Open original source
0
Güvenli Programlama dev.to

AI Agents Hacked: Lessons from OpenAI & Hugging Face

The Rogue Agent: When AI Turns Malicious (Without Permission) For a full week, the AI agent operated in the shadows.

TA0001 · T1566 KRITIS / Energie Gov & Defense IT Security 95%
vor 3 Monaten 12 Min Open original source
0
️ Hunter Status Update
Community Stream
News-Deck Güvenli Programlama 📖 0 · ⏭ 0 · 🗳️ 0

Kartlar yüklenir ..

Yüksek = Preview · Doğru = · Left/Down = Back · Enter/Type Card = Preview · V = Voting

Auto-Newslider · Sliders
Tüm Değişimi Değiştirin
Visible kartlar

Otomatik haberlider: ok anahtarlarını sol ve sağ, otomatik duraklar odak ve kaydırıcı jestler

Canlı sinyal akışı 0 Signals
İlk sinyalleri bekleyin..
Source View 24 Kaynaklar

Bu kategorinin son 14 gününde (altınlar dahil).

heise developer News 36
Son katkı: 30.10.2026 um 17:01 Uhr
Mesajları göster (5)
freeCodeCamp Programming Tutorial… 17
Son katkı: 30.10.2026 um 14:57 Uhr
Mesajları göster (5)
GitHub · cli/cli 8
Son katkı: 23.10.2026 um 07:28 Uhr
Android Developers' Blog 6
Son katkı: 28.10.2026 um 01:00 Uhr
Google Alert – it security 5
Son katkı: 27.10.2026 um 14:53 Uhr
Chaos Computer Club - last 100 ev… 5
Son katkı: 22.10.2026 um 00:00 Uhr
Chrome for Developers 2
Son katkı: 27.10.2026 um 17:00 Uhr
Articles on Smashing Magazine — F… 2
Son katkı: 23.10.2026 um 15:00 Uhr
0 Makaleler kaydedildi
Kaydedilmiş makale yok.
Eklemek için bir haber üzerindeki simgesine tıklayın.
GLOBAL CTI GEO-RADAR
LIVE VECTOR
APT29 / SandwormVolt TyphoonLazarus GroupCharming KittenKRITIS Target ZoneScattered Spider
DIFF: