IT‑Sicherheits‑Digest (2026-04-17)

Aktuelle Security‑News

Österlicher Zertifikats-GAU bei D-Trust: Zehntausende Zertifikate ungültig (2026-04-17 05:30 UTC)
- Kurz: Zwischen Gründonnerstag und Ostermontag mussten Admins ihre TLS-Zertifikate austauschen. Nun gibt D-Trust bekannt: Fast 60.000 waren nicht regelkonform.
- Quelle: Link
Auslegungssache 157: Datenschutz vor Gericht (2026-04-17 04:10 UTC)
- Kurz: Im c’t-Datenschutz-Podcast erklärt Niedersachsens Datenschutzbeauftragter, wie Widerspruchsverfahren gegen Bußgelder ablaufen – und warum er außen vor bleibt.
- Quelle: Link
Die Natur ist unsere Quelle der Zufälligkeit: zum Tode von Michael O. Rabin (2026-04-16 17:48 UTC)
- Kurz: Im Alter von 94 Jahren ist Michael Oser Rabin gestorben. Er war der einzige Empfänger des Turing-Awards, der im Deutschen Reich geboren wurde.
- Quelle: Link

Operation PowerOFF identifies 75k DDoS users, takes down 53 domains (2026-04-16 22:26 UTC)
- Kurz: The latest wave of “Operation PowerOFF,” on April 13, 2026, targeted the distributed denial-of-service (DDoS) ecosystem and its users across 21 countries. […]
- Quelle: Link
ZionSiphon malware designed to sabotage water treatment systems (2026-04-16 22:04 UTC)
- Kurz: A new malware called ZionSiphon, specifically designed for operational technology, is targeting water treatment and desalination environments to sabotage their operations. […]
- Quelle: Link
New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges (2026-04-16 20:19 UTC)
- Kurz: A researcher known as “Chaotic Eclipse” has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed “RedSun,” in the past two weeks, protesting how the company works with cybersecurity researchers. […]
- Quelle: Link

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation (2026-04-17 03:22 UTC)
- Kurz: A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency (CISA). To that end, the agency has added the vulnerab…
- Quelle: Link
Newly Discovered PowMix Botnet Hits Czech Workers Using Randomized C2 Traffic (2026-04-16 17:52 UTC)
- Kurz: Cybersecurity researchers have warned of an active malicious campaign that’s targeting the workforce in the Czech Republic with a previously undocumented botnet dubbed PowMix since at least December 2025. “PowMix employs randomized command-…
- Quelle: Link
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories (2026-04-16 13:05 UTC)
- Kurz: You know that feeling when you open your feed on a Thursday morning and it’s just… a lot? Yeah. This week delivered. We’ve got hackers getting creative in ways that are almost impressive if you ignore the whole “crime” part, ancient vulne…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).