IT‑Sicherheits‑Digest (2026-03-25)

Aktuelle Security‑News

„Das ist übel“: DarkSword-Malware auf Github, iPhones sofort patchen (2026-03-24 18:07 UTC)
- Kurz: Ein mächtiges Exploit-Kit ist auf Github aufgetaucht und könnte so zu einer großen Gefahr für iPhones werden. Nutzer sollten dringend auf iOS 26 aktualisieren.
- Quelle: Link
iOS 26.4 ist da: Diese Neuerungen bringen die Apple-Updates (2026-03-24 18:01 UTC)
- Kurz: Apple feilt weiter an Liquid Glass und reicht Funktionen nach. Neben iPhones erhalten auch iPads, Macs und weitere Apple-Geräte Updates.
- Quelle: Link
Darknet Diaries Deutsch: Hieu - vom Darknet zum Datendealer Teil 1 (2026-03-24 15:02 UTC)
- Kurz: Ein junger vietnamesischer Hacker will online Geld verdienen und landet im Darknet. Dort findet er einen globalen Daten-Schwarzmarkt.
- Quelle: Link

PTC warns of imminent threat from critical Windchill, FlexPLM RCE bug (2026-03-24 23:04 UTC)
- Kurz: PTC Inc. is warning of a critical vulnerability in Windchill and FlexPLM, widely used product lifecycle management (PLM) solutions, that could allow remote code execution. […]
- Quelle: Link
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens (2026-03-24 22:29 UTC)
- Kurz: The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular “LiteLLM” Python package on PyPI and claiming to have stolen data from hundreds of thousands of devices during the attack. […]
- Quelle: Link
FCC bans new routers made outside the USA over security risks (2026-03-24 20:41 UTC)
- Kurz: The Federal Communications Commission has updated its Covered List to include all consumer routers made in foreign countries, banning the sale of new models in the U.S. […]
- Quelle: Link

TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise (2026-03-24 18:21 UTC)
- Kurz: TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, …
- Quelle: Link
Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR (2026-03-24 17:05 UTC)
- Kurz: A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller …
- Quelle: Link
5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents (2026-03-24 16:36 UTC)
- Kurz: On February 25, 2026, Gartner published its inaugural Market Guide for Guardian Agents, marking an important milestone for this emerging category. For those unfamiliar with the various Gartner report types, “a Market Guide defines a market …
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).