Cloud-Sicherheit
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-90769: High Schwachstelle
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side...
CLOUD-SICHERHEIT
Your Cloud Security Checklist Doesn’t Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026...
CLOUD-SICHERHEIT
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial...
CLOUD-SICHERHEIT
🟠 CVE-2026-80494: High Schwachstelle
The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a...
CLOUD-SICHERHEIT
Artifactory flaws chained in attacks deploying backdoor malware
Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a...
CLOUD-SICHERHEIT
Your Cloud Security Checklist Doesn’t Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026...
CLOUD-SICHERHEIT
Your Cloud Security Checklist Doesn’t Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026...
CLOUD-SICHERHEIT
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-80352: Critical Schwachstelle
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource...
CLOUD-SICHERHEIT
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to...