Endpunktsicherheit
ENDPUNKTSICHERHEIT
Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary...
ENDPUNKTSICHERHEIT
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-73198: High Schwachstelle
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-73197: High Schwachstelle
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-66593: Critical Schwachstelle
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk
ENDPUNKTSICHERHEIT
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications,...
ENDPUNKTSICHERHEIT
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account...
ENDPUNKTSICHERHEIT
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring...
ENDPUNKTSICHERHEIT
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware,...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-74906: High Schwachstelle
SiYuan before v3.7.4 contains an incorrect authorization vulnerability in eight publish-mode reader-facing endpoints that filter results using the visibility list...