IT‑Sicherheits‑Digest (2026-02-11)

Aktuelle Security‑News

heise security

  • Attacken auf BeyondTrust Remote Support und Privileged Remote Access möglich (2026-02-10 11:27 UTC)
    • Kurz: Zwei Fernwartungslösungen von BeyondTrust sind verwundbar. Sicherheitsupdates schließen eine kritische Lücke.
    • Quelle: Link
  • Archive.today: Betreiber setzt Nutzer für DDoS-Attacke ein (2026-02-10 11:00 UTC)
    • Kurz: Der Betreiber von Archive.today setzt Besucher seiner Seite ohne deren Wissen für eine DDoS-Attacke ein. Betroffener ist ein finnischer Blogger.
    • Quelle: Link
  • Jetzt patchen! Abermals Attacken auf SolarWinds Web Help Desk beobachtet (2026-02-10 08:17 UTC)
    • Kurz: Sicherheitsforschern zufolge nutzen Angreifer derzeit kritische Schadcode-Lücken in SolarWinds Web Help Desk aus.
    • Quelle: Link

BleepingComputer

  • Microsoft releases Windows 11 26H1 for select and upcoming CPUs (2026-02-11 02:06 UTC)
    • Kurz: Microsoft has announced Windows 11 26H1, but it’s not for existing PCs. Instead, it will ship on devices with Snapdragon X2 processors and possibly other rumored ARM chips.w […]
    • Quelle: Link
  • New Linux botnet SSHStalker uses old-school IRC for C2 comms (2026-02-10 23:09 UTC)
    • Kurz: A newly documented Linux botnet named SSHStalker is using the IRC (Internet Relay Chat) communication protocol for command-and-control (C2) operations. […]
    • Quelle: Link
  • North Korean hackers use new macOS malware in crypto-theft attacks (2026-02-10 22:17 UTC)
    • Kurz: North Korean hackers are running tailored campaigns using AI-generated video and the ClickFix technique to deliver malware for macOS and Windows to targets in the cryptocurrency sector. […]
    • Quelle: Link

The Hacker News

  • DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies (2026-02-10 17:44 UTC)
    • Kurz: The information technology (IT) workers associated with the Democratic People’s Republic of Korea (DPRK) are now applying to remote positions using real LinkedIn accounts of individuals they’re impersonating, marking a new escalation of the…
    • Quelle: Link
  • Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools (2026-02-10 14:36 UTC)
    • Kurz: Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver (BYOVD) component for defense evasion purposes within the ransomware payl…
    • Quelle: Link
  • From Ransomware to Residency: Inside the Rise of the Digital Parasite (2026-02-10 13:59 UTC)
    • Kurz: Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more dangerous shift happening quietly all around them? According to Picus Labs’ new Red Report 2…
    • Quelle: Link

Neue CVEs (letzte 24h, NVD‑Abgleich)

Fortinet FortiGate (7.4.x)

  • CVE-2025-52436 — CVSS 8.8 (HIGH)
    • Kurz: An Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.…
    • Quelle: Link
  • CVE-2026-22153 — CVSS 8.1 (HIGH)
    • Kurz: An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO poli…
    • Quelle: Link
  • CVE-2025-62676 — CVSS 7.1 (HIGH)
    • Kurz: An Improper Link Resolution Before File Access (‘Link Following’) vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 a…
    • Quelle: Link
  • CVE-2025-64157 — CVSS 6.7 (MEDIUM)
    • Kurz: A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to exe…
    • Quelle: Link
  • CVE-2025-68686 — CVSS 5.9 (MEDIUM)
    • Kurz: An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions…
    • Quelle: Link
  • CVE-2025-55018 — CVSS 5.8 (MEDIUM)
    • Kurz: An inconsistent interpretation of http requests (‘http request smuggling’) vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6…
    • Quelle: Link

Atlassian (Jira/Confluence)

  • Keine neuen Treffer in den letzten 24h.

HPE/Aruba Switches

  • Keine neuen Treffer in den letzten 24h.

VMware ESXi/vCenter (7.x)

  • CVE-2025-25058 — CVSS 3.3 (LOW)
    • Kurz: Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series before version 2.2.2.0 (esxi 8.0) & 2.2.3.0 (esxi 9.0) within Ring 1: Device Drivers may allow an information disclosure. …
    • Quelle: Link

Hinweis

  • CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).