IT‑Sicherheits‑Digest (2026-05-08)

Aktuelle Security‑News

QLNX: Neuer Remote-Access-Trojaner zielt auf Linux-Entwickler (2026-05-07 13:49 UTC)
- Kurz: Hinter Quasar Linux (QLNX) steckt kein Betriebssystem, sondern ein Supply-Chain-Angriffstool, das sich nur schwer erkennen und entfernen lässt.
- Quelle: Link
„CallPhantom“: Android-App liefert falsche Daten anstatt Anrufprotokolle (2026-05-07 12:01 UTC)
- Kurz: Die Apps der „CallPhantom“-Kampagne versprechen, gegen Zahlung Anrufverlauf beliebiger Nummern zu liefern. Die Daten sind erfunden.
- Quelle: Link
Cyberkrieg: Medien zitieren Interna aus Russlands Geheimdienstausbildung (2026-05-07 10:27 UTC)
- Kurz: An einem Lehrstuhl einer Moskauer Universität lässt der Militärgeheimdienst GRU angeblich seinen Nachwuchs ausbilden. Mehrere Medien zitieren interne Dokumente.
- Quelle: Link

Canvas login portals hacked in mass ShinyHunters extortion campaign (2026-05-07 22:36 UTC)
- Kurz: The ShinyHunters extortion gang has breached education technology giant Instructure again, this time exploiting another vulnerability to deface Canvas login portals for hundreds of colleges and universities. […]
- Quelle: Link
New TCLBanker malware self-spreads over WhatsApp and Outlook (2026-05-07 22:06 UTC)
- Kurz: A new trojan named TCLBanker, which targets 59 banking, fintech, and cryptocurrency platforms, uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems. […]
- Quelle: Link
New PCPJack worm steals credentials, cleans TeamPCP infections (2026-05-07 18:35 UTC)
- Kurz: A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP’s access to the systems. […]
- Quelle: Link

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access (2026-05-07 17:55 UTC)
- Kurz: Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks in the wild. The high-severity vulnerability, CVE-2026-6973 (CVSS score: 7.2), is a case of improper input validation a…
- Quelle: Link
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems (2026-05-07 17:45 UTC)
- Kurz: Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any artifacts linked to TeamPCP from the environments. “The toolset harvests credentials…
- Quelle: Link
One Click, Total Shutdown: The “Patient Zero” Webinar on Killing Stealth Breaches (2026-05-07 13:50 UTC)
- Kurz: The hardest part of cybersecurity isn’t the technology, it’s the people. Every major breach you’ve read about lately usually starts the same way: one employee, one clever email, and one “Patient Zero” infection. In 2026, hackers are using A…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).