iOS: Gelöschte Signal-Daten von FBI via Benachrichtigungsdatenbank extrahiert (2026-04-10 09:33 UTC)
Kurz: Trotz der Tatsache, dass eine Verdächtige die gesamte App entfernt hatte, konnten FBI-Forensiker noch Signal-Nachrichten finden. Sie verwendeten einen Trick.
Google Chrome macht Cookie-Klau unter Windows sinnlos (2026-04-10 07:27 UTC)
Kurz: Cyberangreifer sehen es auf Session-Cookies ab, mit denen sie Zugang erhalten. Google aktiviert in Chrome für Windows nun einen Schutz. macOS folgt.
ChatGPT rolls out new $100 Pro subscription to challenge Claude (2026-04-11 02:08 UTC)
Kurz: OpenAI has rolled out a new Pro subscription that costs $100 and is in line with Claude’s pricing, which also has a $100 subscription, in addition to the $200 Max monthly plan. […]
Nearly 4,000 US industrial devices exposed to Iranian cyberattacks (2026-04-10 15:52 UTC)
Kurz: The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation. […]
Analysis of one billion CISA KEV remediation records exposes limits of human-scale security (2026-04-10 14:01 UTC)
Kurz: Analysis of 1 billion CISA KEV remediation records reveal a breaking point for human-scale security. Qualys shows most critical flaws are exploited before defenders can patch them. […]
Kurz: Cybersecurity researchers have flagged yet another evolution of the ongoing GlassWorm campaign, which employs a new Zig dropper that’s designed to stealthily infect all integrated development environments (IDEs) on a developer’s machine. Th…
Browser Extensions Are the New AI Consumption Channel That No One Is Talking About (2026-04-10 11:00 UTC)
Kurz: While much of the discussion on AI security centers around protecting ‘shadow’ AI and GenAI consumption, there’s a wide-open window nobody’s guarding: AI browser extensions. A new report from LayerX exposes just how deep this blind spot goe…
Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows (2026-04-10 07:58 UTC)
Kurz: Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began testing the security feature in open beta. The public availability is currently limited to Win…