IT‑Sicherheits‑Digest (2026-06-05)

Aktuelle Security‑News

Warten auf Sicherheitspatch: Zugangsdaten von Acer-Wave-7-Router einsehbar (2026-06-05 07:23 UTC)
- Kurz: Kritische Schwachstellen bedrohen Acer-Router der Wave-7-Serie. Sicherheitsupdates sind bislang nicht verfügbar.
- Quelle: Link
Tails 7.8.1: Update des anonymisierenden Linux schließt Sicherheitslücken (2026-06-05 06:12 UTC)
- Kurz: Das zum anonymen Surfen im Netz dienende Tails-Linux schließt Sicherheitslücken im Kernel und dem Tor-Client.
- Quelle: Link
Google Chrome: Update schließt 429 Sicherheitslücken (2026-06-05 05:14 UTC)
- Kurz: Das Google-Chrome-Update aus dieser Woche stopft 429 Sicherheitslücken, davon gelten 22 als kritisches Risiko.
- Quelle: Link

Cisco warns of unpatched SD-WAN zero-day exploited in attacks (2026-06-05 06:24 UTC)
- Kurz: On Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively exploited in attacks enabling root privilege escalation. […]
- Quelle: Link
Brave Software releases Origin for a paid, bloat-free browsing experience (2026-06-04 21:37 UTC)
- Kurz: Brave has announced the public release of Brave Origin, a paid minimalist version of its browser that strips out cryptocurrency, AI, rewards, and other monetization-focused features. […]
- Quelle: Link
Hola Browser for Windows compromised to deliver cryptominer (2026-06-04 21:27 UTC)
- Kurz: The Windows version of the Hola Browser has been compromised in a supply chain attack that delivered an undeclared executable identified by researchers as a cryptocurrency miner. […]
- Quelle: Link

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins (2026-06-05 07:01 UTC)
- Kurz: Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, days before the June 11 kickoff. Recent reports describe thousands of lookalike FIFA domains, banking malware hidden insid…
- Quelle: Link
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network (2026-06-05 05:34 UTC)
- Kurz: The threat actor known as PCPJack has hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure to create a covert SMTP email relay network. “Compromised business servers across the U.S., Europe, an…
- Quelle: Link
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public (2026-06-04 16:55 UTC)
- Kurz: Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is alre…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.