Cloud-Sicherheit
CLOUD-SICHERHEIT
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other...
CLOUD-SICHERHEIT
🟠 CVE-2026-86259: High Schwachstelle
OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services....
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-86242: High Schwachstelle
Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins...
CLOUD-SICHERHEIT
IDScan sued over alleged data breach affecting 153 million drivers
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell...
CLOUD-SICHERHEIT
Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-86173: High Schwachstelle
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-86119: High Schwachstelle
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN...
CLOUD-SICHERHEIT
Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across...
CLOUD-SICHERHEIT
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex is urging users to update their instances to the latest version following the release of an update that patches...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-85612: High Schwachstelle
OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied...