Kurz: Anthropics neue KI Mythos sorgt für Aufregung. In den USA wurden die Chefs der systemrelevanten Banken einbestellt, hier erwartet das BSI weitreichende Folgen.
TP-Link-Angriff: Microsoft im Visier, Deutschland im Glück (2026-04-09 14:40 UTC)
Kurz: Die Attacke auf Router und Access Points von TP-Link zielte auf die Übernahme von Microsofts Office-Cloud-Sessions. Deutschland war laut BSI wenig betroffen.
New ‘LucidRook’ malware used in targeted attacks on NGOs, universities (2026-04-09 22:04 UTC)
Kurz: A new Lua-based malware, called LucidRook, is being used in spear-phishing campaigns targeting non-governmental organizations and universities in Taiwan. […]
New VENOM phishing attacks steal senior executives’ Microsoft logins (2026-04-09 21:37 UTC)
Kurz: Threat actors using a previously undocumented phishing-as-a-service (PhaaS) platform called “VENOM” are targeting credentials of C-suite executives across multiple industries. […]
Healthcare IT solutions provider ChipSoft hit by ransomware attack (2026-04-09 19:46 UTC)
Kurz: Dutch healthcare software vendor ChipSoft has been impacted by a ransomware attack that forced the company to take offline its website and digital services for patients and healthcare providers. […]
Kurz: Details have emerged about a now-patched security vulnerability in a widely used third-party Android software development kit (SDK) called EngageLab SDK that could have put millions of cryptocurrency wallet users at risk. “This flaw allows …
UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns (2026-04-09 16:23 UTC)
Kurz: A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations (NGOs) and suspected universities to deploy a new Lua-based malware called LucidRoo…
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories (2026-04-09 12:57 UTC)
Kurz: Thursday. Another week, another batch of things that probably should’ve been caught sooner but weren’t. This one’s got some range — old vulnerabilities getting new life, a few “why was that even possible” moments, attackers leaning on platf…
Kurz: The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing nonce verification on the ahsc_ajax_reset_options() function.…