IT‑Sicherheits‑Digest (2026-05-21)

Aktuelle Security‑News

Sicherheitspatches Atlassian: Bamboo, Confluence & Co. sind verwundbar (2026-05-21 07:49 UTC)
- Kurz: Unter anderem DoS- und Schadcode-Sicherheitslücken bedrohen Anwendungen von Atlassian. Admins sollten die Patches zeitnah installieren.
- Quelle: Link
IT-Vorfall: Cybergang Rhysida erpresst Stadt Stuttgart (2026-05-21 07:40 UTC)
- Kurz: Die kriminelle Vereinigung Rhysida behauptet, bei der Stadt Stuttgart umfangreiche Dokumente aus der IT geklaut zu haben und will Lösegeld.
- Quelle: Link
Browser-Updates: Chrome, Firefox und Thunderbird stopfen Sicherheitslecks (2026-05-21 06:49 UTC)
- Kurz: Aktualisierungen für die Webbrowser Chrome und Firefox sowie das Mailprogramm Thunderbird stopfen teils kritische Sicherheitslücken.
- Quelle: Link

Microsoft warns of new Defender zero-days exploited in attacks (2026-05-21 07:49 UTC)
- Kurz: On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that have been exploited in zero-day attacks. […]
- Quelle: Link
GitHub links repo breach to TanStack npm supply-chain attack (2026-05-21 06:54 UTC)
- Kurz: GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week’s TanStack npm supply-chain attack. […]
- Quelle: Link
Ukraine identifies infostealer operator tied to 28,000 stolen accounts (2026-05-20 21:36 UTC)
- Kurz: The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targeting users of an online store in California. […]
- Quelle: Link

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension (2026-05-21 04:27 UTC)
- Kurz: GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned version of the Nx Console Microsoft Visual Studio Code (VS Code) extension. The …
- Quelle: Link
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks (2026-05-21 03:44 UTC)
- Kurz: Drupal has released security updates for a “highly critical” security vulnerability in Drupal Core that could be exploited by attackers to achieve remote code execution, privilege escalation, or information disclosure. The vulnerability, no…
- Quelle: Link
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development (2026-05-20 17:06 UTC)
- Kurz: Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the security of artificial intelligence (AI) agents. RAMPART, short for Risk Assessment and Measurement Platform for Agentic …
- Quelle: Link

Keine neuen Treffer in den letzten 24h.
Hinweis: NVD‑Abfrage fehlgeschlagen für ‘VMware’: HTTP Error 429: Too Many Requests
Hinweis: NVD‑Abfrage fehlgeschlagen für ‘ESXi’: HTTP Error 429: Too Many Requests
Hinweis: NVD‑Abfrage fehlgeschlagen für ‘vCenter’: HTTP Error 429: Too Many Requests

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.