IT‑Sicherheits‑Digest (2026-04-01)

Aktuelle Security‑News

l+f: Claude serviert Zero-Day-Exploits frei Haus (2026-03-31 18:10 UTC)
- Kurz: Dass sich Guardrails umgehen lassen, war eigentlich klar. Dass das so einfach gehen könnte, überrascht dann doch.
- Quelle: Link
Darknet Diaries Deutsch: Hieu - vom Darknet zum Datendealer Teil 2 (2026-03-31 14:02 UTC)
- Kurz: In Teil zwei erzählt uns der vietnamesische Hacker, wie er zum Datenhändler wurde und dann für das falsche Verbrechen im Gefängnis gelandet ist.
- Quelle: Link
Anthropics Claude Code: Kompletter Quellcode im Netz (2026-03-31 13:14 UTC)
- Kurz: Der Quellcode von Anthropics CLI-Tool Claude Code wurde versehentlich über eine Source-Map im npm-Registry öffentlich zugänglich.
- Quelle: Link

New Windows 11 emergency update fixes preview update install issues (2026-04-01 05:33 UTC)
- Kurz: Microsoft released an emergency update to fix the March 2026 KB5079391 non-security preview update, which was pulled over the weekend due to installation issues. […]
- Quelle: Link
Claude Code source code accidentally leaked in NPM package (2026-04-01 00:32 UTC)
- Kurz: Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no customer data or credentials were exposed. […]
- Quelle: Link
Google now allows you to change your @gmail.com address (2026-03-31 23:13 UTC)
- Kurz: Google is rolling out a new feature in the U.S. that allows users to change their @gmail address or create a new alias. […]
- Quelle: Link

Android Developer Verification Rollout Begins Ahead of September Enforcement (2026-03-31 18:28 UTC)
- Kurz: Google on Monday said it’s officially rolling out Android developer verification to all developers to combat the problem of bad actors distributing harmful apps while “hiding behind anonymity.” The development comes ahead of a planned verif…
- Quelle: Link
TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks (2026-03-31 16:03 UTC)
- Kurz: A high-severity security flaw in the TrueConf client video conferencing software has been exploited in the wild as a zero-day as part of a campaign targeting government entities in Southeast Asia dubbed TrueChaos. The vulnerability in quest…
- Quelle: Link
Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts (2026-03-31 13:09 UTC)
- Kurz: Cybersecurity researchers have disclosed a security “blind spot” in Google Cloud’s Vertex AI platform that could allow artificial intelligence (AI) agents to be weaponized by an attacker to gain unauthorized access to sensitive data and com…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).