Endpunktsicherheit
ENDPUNKTSICHERHEIT
Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the...
ENDPUNKTSICHERHEIT
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-7534: High Schwachstelle
The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST API endpoint `/wp-json/wc-srp/v1/earning`...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-15017: High Schwachstelle
The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4....
ENDPUNKTSICHERHEIT
🔴 CVE-2026-15015: Critical Schwachstelle
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-15011: Critical Schwachstelle
The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in...
ENDPUNKTSICHERHEIT
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust...
ENDPUNKTSICHERHEIT
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-12968: High Schwachstelle
The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint...
ENDPUNKTSICHERHEIT
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure...