Endpunktsicherheit
ENDPUNKTSICHERHEIT
Laravel Lang packages hijacked to deploy credential-stealing malware
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after...
ENDPUNKTSICHERHEIT
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a...
ENDPUNKTSICHERHEIT
Tables Turn on ‚The Gentlemen‘ RaaS Gang With Data Leak
An OPSEC failure provides a window into what helped the ransomware group rise: a generous affiliate model, opportunistic TTPs, and...
ENDPUNKTSICHERHEIT
Foxconn Attack Highlights Manufacturing’s Cyber Crisis
A Nitrogen ransomware attack on Foxconn's North American facilities is one of 600 hits on manufacturers this year, as gangs...
ENDPUNKTSICHERHEIT
Tables Turn on ‚The Gentlemen‘ RaaS Gang With Data Leak
An OPSEC failure provides a window into what helped the ransomware group rise: a generous affiliate model, opportunistic TTPs, and...
ENDPUNKTSICHERHEIT
Foxconn Attack Highlights Manufacturing’s Cyber Crisis
A Nitrogen ransomware attack on Foxconn's North American facilities is one of 600 hits on manufacturers this year, as gangs...
ENDPUNKTSICHERHEIT
Tables Turn on ‚The Gentlemen‘ RaaS Gang With Data Leak
An OPSEC failure provides a window into what helped the ransomware group rise: a generous affiliate model, opportunistic TTPs, and...
ENDPUNKTSICHERHEIT
Foxconn Attack Highlights Manufacturing’s Cyber Crisis
A Nitrogen ransomware attack on Foxconn's North American facilities is one of 600 hits on manufacturers this year, as gangs...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-47102: High Schwachstelle
LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-48249: Medium Schwachstelle
Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST)...