Desolate FCC-Vorgabe: „Freedom Router“ für US-Verbraucher (2026-04-03 05:30 UTC)
Kurz: Ab sofort lassen die USA für Verbraucher nur noch im Inland hergestellte Router zu. Die Vorgaben des FCC sind jedoch unrealistisch und sicherheitsmäßig heikel.
Auslegungssache 156: Datenschutz-Dauerbrenner Microsoft 365 (2026-04-03 04:10 UTC)
Kurz: Im c’t-Datenschutz-Podcast nehmen sich die Hosts mit einem Experten die aktuellen datenschutzrechtlichen Baustellen von Microsoft 365 vor – wieder einmal.
EU-Kommission verbietet Top-Beamten Nutzung von Signal-Gruppen (2026-04-02 14:52 UTC)
Kurz: Aus Sorge vor gezielter digitaler Spionage hat die EU-Kommission ihre ranghöchsten Beamten angewiesen, eine zentrale Signal-Gruppe umgehend aufzulösen.
Claude Code leak used to push infostealer malware on GitHub (2026-04-02 20:30 UTC)
Kurz: Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. […]
Drift loses $280 million North Korean hackers seize Security Council powers (2026-04-02 19:03 UTC)
Kurz: The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation. […]
Residential proxies evaded IP reputation checks in 78% of 4B sessions (2026-04-02 15:21 UTC)
Kurz: Researchers warn that residential proxies used to route malicious traffic are a big problem for IP reputation systems, as there is no clear distinction between attackers and legitimate users. […]
Kurz: A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services (AWS) secrets, shell command histor…
Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise (2026-04-02 15:21 UTC)
Kurz: Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully exploited, could allow an unauthenticated, remote attacker to bypass authentication and gain access to the sy…
Kurz: The latest ThreatsDay Bulletin is basically a cheat sheet for everything breaking on the internet right now. No corporate fluff or boring lectures here, just a quick and honest look at the messy reality of keeping systems safe this week. Th…