IT‑Sicherheits‑Digest (2026-05-29)

Aktuelle Security‑News

Oracle CSPU: 35 Sicherheitsupdates im Mai (2026-05-29 07:51 UTC)
- Kurz: Diverse Produkte von Oracle weisen Sicherheitslücken auf. Updates stehen zum Ausbessern von 35 Schwachstellen bereit.
- Quelle: Link
Chrome-Update schließt 151 Sicherheitslecks – davon 22 kritische (2026-05-29 06:07 UTC)
- Kurz: Wer Chrome nutzt, sollte dringend prüfen, ob der Browser bereits aktuell ist. Das Update vom Mittwoch schließt 151 Sicherheitslücken.
- Quelle: Link
Auslegungssache 160: Kippt der Datenschutz das Haftungsprivileg? (2026-05-29 04:10 UTC)
- Kurz: Im c’t-Datenschutz-Podcast geht es um ein 100-Mio-Bußgeld gegen Yandex, geplante Stellenkürzungen und die Folgen des EuGH-Urteils gegen Russmedia.
- Quelle: Link

Anthropic confirms Claude Mythos-class models will roll out to the public (2026-05-29 00:21 UTC)
- Kurz: Anthropic has confirmed that it plans to bring Mythos-class models to the general public after delaying the rollout due to security risks to public and private software. […]
- Quelle: Link
GreyVibe hackers use ChatGPT, Gemini to power cyberattacks (2026-05-28 22:24 UTC)
- Kurz: A likely Russian threat cluster tracked as GreyVibe has been targeting Ukrainian entities with AI-generated lures and a rich set of custom malware tools. […]
- Quelle: Link
BTMOB Android malware service generates custom phishing payloads (2026-05-28 21:10 UTC)
- Kurz: An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures. […]
- Quelle: Link

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels (2026-05-29 05:57 UTC)
- Kurz: The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of cyber attacks targeting South Korean military and corporate entities through March and April 2026. “Kimsuky employed …
- Quelle: Link
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code (2026-05-28 17:24 UTC)
- Kurz: A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an authenticated user to execute arbitrary code under certain conditions. The security flaw, per Rapid7, is rated 9.4 o…
- Quelle: Link
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer (2026-05-28 15:26 UTC)
- Kurz: Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server (EMS) deployments to deliver credential-stealing malware. “The campaign abused trusted endpoint management infras…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.