IT‑Sicherheits‑Digest (2026-03-23)

Aktuelle Security‑News

Zero-Day erlaubt Codeausführung in WindChill und FlexPLM (2026-03-22 14:19 UTC)
- Kurz: Der Hersteller warnt und bittet Admins, dringend ihre Instanzen mit einer Notlösung abzusichern. Ein Patch steht noch aus.
- Quelle: Link
Windows: Update außer der Reihe korrigiert Login-Probleme (2026-03-22 09:19 UTC)
- Kurz: Microsoft hat am Freitag Probleme beim Login von Apps in Microsoft-Konten eingeräumt. Ein Windows-Notfallupdate löst das jetzt.
- Quelle: Link
Studie: Mehrheit der DACH-Unternehmen hält Cloud-Abschaltung für realistisch (2026-03-20 15:30 UTC)
- Kurz: 83 Prozent der Unternehmen halten eine einseitige Abschaltung durch Cloud-Provider für realistisch. Fast die Hälfte hat keine Exit-Strategie.
- Quelle: Link

VoidStealer malware steals Chrome master key via debugger trick (2026-03-22 14:32 UTC)
- Kurz: An information stealer called VoidStealer uses a new approach to bypass Chrome’s Application-Bound Encryption (ABE) and extract the master key for decrypting sensitive data stored in the browser. […]
- Quelle: Link
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions (2026-03-21 17:30 UTC)
- Kurz: The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed credential-stealing malware through official releases and GitHub Actions. […]
- Quelle: Link
Google adds ‘Advanced Flow’ for safe APK sideloading on Android (2026-03-21 14:18 UTC)
- Kurz: Google has announced a new mechanism in Android called Advanced Flow that will allow sideloading APKs from unverified developers for power users in a more secure way. […]
- Quelle: Link

Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems (2026-03-23 06:15 UTC)
- Kurz: Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it observed malicious activity starting the week…
- Quelle: Link
FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks (2026-03-21 13:17 UTC)
- Kurz: Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with high in…
- Quelle: Link
Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager (2026-03-21 10:24 UTC)
- Kurz: Oracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-2026-21992, carries a C…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).