IT‑Sicherheits‑Digest (2026-05-27)

Aktuelle Security‑News

UniFi OS Server: Kritische Sicherheitslücken ermöglichen Angriffe (2026-05-27 07:54 UTC)
- Kurz: In UniFi OS Server und damit ausgestatteten Produkten können Angreifer fünf Lücken missbrauchen, um unbefugt Änderungen vorzunehmen.
- Quelle: Link
„Passwort“ Folge 58: News mit Failzwiebel, Lösegeld und rostigen Coreutils (2026-05-27 07:00 UTC)
- Kurz: Vielschichtiges Sicherheitsversagen bei einer CA analysieren die Hosts ebenso wie den Wechsel der Linux-Coreutils auf Rust. Und es gibt Neues zu Ransomware.
- Quelle: Link
LiteSpeed cPanel-Plugin: Angriffe auf Schwachstelle beobachtet (2026-05-27 06:45 UTC)
- Kurz: LiteSpeed stellt für diverse CMS Plugins her. Das für cPanel weist eine Sicherheitslücke auf, die Angreifer bereits ausnutzen.
- Quelle: Link

KnowledgeDeliver flaw exploited as a zero-day to install web shells (2026-05-26 20:07 UTC)
- Kurz: Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. […]
- Quelle: Link
Charter confirms data breach after ShinyHunters extortion threat (2026-05-26 19:46 UTC)
- Kurz: U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. […]
- Quelle: Link
How Varonis Atlas integrates Claude Compliance API for AI governance (2026-05-26 14:01 UTC)
- Kurz: AI governance requires visibility into how AI tools interact with enterprise data. Varonis explains how its Atlas platform uses Claude Compliance API data to help monitor usage, investigate risk, and support compliance. […]
- Quelle: Link

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites (2026-05-27 07:45 UTC)
- Kurz: Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malicious download sites. “This emerging delivery technique extends social engineering…
- Quelle: Link
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries (2026-05-26 15:48 UTC)
- Kurz: The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The activity targeted industrial and electronics ma…
- Quelle: Link
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back (2026-05-26 11:58 UTC)
- Kurz: Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.