IT‑Sicherheits‑Digest (2026-06-04)

Aktuelle Security‑News

Cisco stopft kritische Lücke in Unified CM und mehr (2026-06-04 06:56 UTC)
- Kurz: Cisco behandelt Sicherheitslücken in drei Produkten, darunter eine als kritisch eingestufte in Unified Communications Manager.
- Quelle: Link
IBAN in Chat verraten: Hausrat mit Cyber-Schutz zahlt nicht (2026-06-04 05:35 UTC)
- Kurz: Fast 2000 Euro durch einen Onlinebetrug futsch – doch die Hausratversicherung zahlt trotz Cyber-Schutzbaustein nicht.
- Quelle: Link
Burst Statistics: Angriffe auf kritische Lücke im populären WordPress-Plugin (2026-06-03 11:34 UTC)
- Kurz: Angreifer missbrauchen eine kritische Lücke im WordPress-Plugin Burst Statistics. Sie ermöglicht die Übernahme von Instanzen.
- Quelle: Link

Chinese hackers use new Atlas RAT malware in European cyberattacks (2026-06-03 21:45 UTC)
- Kurz: A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the Atlas backdoor. […]
- Quelle: Link
CISA warns of active attacks exploiting Android, Linux bugs (2026-06-03 15:36 UTC)
- Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. […]
- Quelle: Link
What 345 Days of Untested Exposure Looks Like at a Bank (2026-06-03 14:02 UTC)
- Kurz: A two-week penetration test can leave roughly 345 days of real-world exposure unvalidated. Sprocket Security explores why continuous testing is becoming critical as attack surfaces constantly change. […]
- Quelle: Link

DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets (2026-06-04 06:06 UTC)
- Kurz: The U.S. Department of Justice (DoJ) on Wednesday announced the results of a sweeping action undertaken by government authorities and private sector companies to combat cyber-enabled and cryptocurrency fraud targeting Americans. The “Disrup…
- Quelle: Link
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag (2026-06-03 14:56 UTC)
- Kurz: A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps. Any other app on the same phone could ask for the signed-in user’…
- Quelle: Link
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479) (2026-06-03 13:47 UTC)
- Kurz: Redis has patched a use-after-free in its blocking-client code that lets an authenticated user run arbitrary OS commands on the machine hosting the database. The flaw was found by an autonomous AI tool built to hunt bugs in large codebases.…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.