Netzwerksicherheit
ENDPUNKTSICHERHEIT
🔴 CVE-2026-19516: Critical Schwachstelle
A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also...
NETZWERKSICHERHEIT
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with...
NETZWERKSICHERHEIT
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in...
NETZWERKSICHERHEIT
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call....
NETZWERKSICHERHEIT
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by...
ENDPUNKTSICHERHEIT
🔴 CVE-2026-15038: Critical Schwachstelle
The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to...
NETZWERKSICHERHEIT
China-Linked APT Expands Proxy Network With New Malware
Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware...
NETZWERKSICHERHEIT
In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Stree
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack,...
NETZWERKSICHERHEIT
🟠 CVE-2026-10595: High Schwachstelle
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-71993: Critical Schwachstelle
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers...