Vodafones Spam-Warner hat schon millionenfach angeschlagen (2026-04-29 05:55 UTC)
Kurz: Das Handy klingelt, die Telefonnummer ist unbekannt. Wer drangeht, hat es manchmal mit Abzocke-Anrufern zu tun. Vodafone warnt seine Kunden, die Telekom auch.
In Finnland verhaftetes Mitglied bekannter Cybergang in den USA angeklagt (2026-04-29 03:05 UTC)
Kurz: Ein offenbar zur Cybercrime-Gang „Scattered Spider“ gehörender Teenager wurde kürzlich in Helsinki verhaftet. Jetzt erheben die USA Anklage gegen den US-Bürger.
USA erweitern das Router-Verbot (2026-04-28 20:45 UTC)
Kurz: Die USA lassen nur noch im Inland hergestellte Router zu. Nebenbei wird das Verbot erweitert. Ausnahmen werden gemacht, aber Transparenz wäre anders.
Broken VECT 2.0 ransomware acts as a data wiper for large files (2026-04-28 21:25 UTC)
Kurz: Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to permanently destroying larger files rather than encrypt them. […]
Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw (2026-04-28 21:07 UTC)
Kurz: Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability tracked as CVE-2026-42208. […]
Video service Vimeo confirms Anodot breach exposed user data (2026-04-28 19:04 UTC)
Kurz: Vimeo has disclosed that data belonging to some of its customers and users has been accessed without authorization following the recent breach at the Anodot data anomaly detection company. […]
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure (2026-04-29 05:34 UTC)
Kurz: In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI’s LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug b…
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push (2026-04-28 18:19 UTC)
Kurz: Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to obtain remote code execution with a single “git push” command.…
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign (2026-04-28 17:39 UTC)
Kurz: A cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets Minecraft players with a new stealer called LofyStealer (aka GrabBot). “The malware disguises itself as a Minecraft hac…