IT‑Sicherheits‑Digest (2026-03-13)

Aktuelle Security‑News

Chrome-Notfallupdate: Zwei attackierte Codeschmuggel-Lücken gestopft (2026-03-13 05:51 UTC)
- Kurz: Google hat in der Nacht zum Freitag ein Notfallupdate für Chrome herausgegeben. Es stopft zwei im Internet angegriffene Sicherheitslecks.
- Quelle: Link
Android-Chef zu Sideloading und Registrierung: „Die Warnungen sind unzureichend“ (2026-03-12 14:26 UTC)
- Kurz: Google führt eine Registrierungspflicht für alle Android-App-Entwickler ein. Laut Android-Chef beugt sich der Konzern damit unter anderem politischem Druck.
- Quelle: Link
Zoom: Netzwerkangriffe auf kritische Sicherheitslücke möglich (2026-03-12 13:32 UTC)
- Kurz: In der Videokonferenzsoftware von Zoom finden sich teils kritische Sicherheitslücken. Angreifer aus dem Netz können Rechte ausweiten.
- Quelle: Link

Google fixes two new Chrome zero-days exploited in attacks (2026-03-13 06:56 UTC)
- Kurz: Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day attacks. […]
- Quelle: Link
Canadian retail giant Loblaw notifies customers of data breach (2026-03-12 21:32 UTC)
- Kurz: Still, out of an abundance of caution, Loblaw says it has automatically logged out all customers from their accounts. Account holders who need to access the company’s digital services will have to log in again. […]
- Quelle: Link
England Hockey investigating ransomware data breach (2026-03-12 20:37 UTC)
- Kurz: England Hockey, the governing body for field hockey in England, is investigating a potential data breach after the AiLock ransomware gang listed it as a victim on its data leak site. […]
- Quelle: Link

Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries (2026-03-13 05:26 UTC)
- Kurz: A court-authorized international law enforcement operation has dismantled a criminal proxy service named SocksEscort that enslaved thousands of residential routers worldwide into a botnet for committing large-scale fraud. “SocksEscort infec…
- Quelle: Link
Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution (2026-03-13 04:15 UTC)
- Kurz: Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The vulnerabilities are as follows - CVE-2026-2166…
- Quelle: Link
Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays (2026-03-12 17:31 UTC)
- Kurz: Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that’s written in Rust, marking a significant departure from other known Delphi-based malware families associated with the Latin American cy…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).