Endpunktsicherheit
ENDPUNKTSICHERHEIT
🔴 CVE-2026-76840: Critical Schwachstelle
RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an...
ENDPUNKTSICHERHEIT
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely...
ENDPUNKTSICHERHEIT
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-78154: High Schwachstelle
A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_code of the file backend/app/api/routes/v1/user_invitation_code.py of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-10582: High Schwachstelle
Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone....
ENDPUNKTSICHERHEIT
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud
Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a...
ENDPUNKTSICHERHEIT
Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary...
ENDPUNKTSICHERHEIT
🟡 CVE-2026-58002: Medium Schwachstelle
WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that allows authenticated users to...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-62204: Medium Schwachstelle
SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-58003: High Schwachstelle
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the releaseVideoNow.json.php endpoint that lacks authenticity checks and...