Bericht: Cyberkriminelle stehlen Cisco-Quellcode durch gestohlene Credentials (2026-04-02 03:08 UTC)
Kurz: Nach der Supply-Chain-Attacke auf LiteLLM konnten Angreifer auf interne Cisco-Daten zugreifen, heißt es. Sourcecode von Cisco und Kunden wurde wohl gestohlen.
BSI veröffentlicht ersten Leitfaden für IT-Grundschutz++ (2026-04-01 15:51 UTC)
Kurz: Das BSI hat nun auch den Leitfaden für die Neufassung seines IT-Grundschutzes herausgebracht. Noch kann es aber zu Änderungen am Grundschutz++ kommen.
New CrystalRAT malware adds RAT, stealer and prankware features (2026-04-01 23:17 UTC)
Kurz: A new malware-as-a-service called CrystalRAT is being promoted on Telegram, offering remote access, data theft, keylogging, and clipboard hijacking capabilities. […]
Apple expands iOS 18 updates to more iPhones to block DarkSword attacks (2026-04-01 21:50 UTC)
Kurz: Apple has now made it possible for more iPhones still running iOS 18 to receive security updates that protect against the actively exploited DarkSword exploit kit. […]
Kurz: Hackers have targeted TrueConf conference servers in attacks that exploit a zero-day vulnerability, allowing them to execute arbitrary files on all connected endpoints. […]
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails (2026-04-01 16:10 UTC)
Kurz: The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity agency itself was impersonated to distribute a remote administration tool known as AGEWHEEZE. As part of t…
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass (2026-04-01 14:10 UTC)
Kurz: Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files. The activity, beginning in late February 2026, leverages these scripts to initiate a multi-stage …
Block the Prompt, Not the Work: The End of “Doctor No” (2026-04-01 12:46 UTC)
Kurz: There is a character that keeps appearing in enterprise security departments, and most CISOs know exactly who that is. It doesn’t build. It doesn’t enable. Its entire function is to say “No.” No to ChatGPT. No to DeepSeek. No to the file-sh…