Interview: Zehntausende US-Dollar Schaden durch aufgeblähte Sicherheitswarnungen (2026-09-12 06:33 UTC)
Kurz: Meldungen zu Sicherheitslücken sind für Open-Source-Projekte wichtig – viele davon seien inzwischen aber aufgeblähtes Marketing, meint Peter Gutmann.
Patches: IT-Sicherheitsprodukte von Check Point werden zum Sicherheitsrisiko (2026-09-11 11:40 UTC)
Kurz: Mehrere Produkte von Check Point wie Security Gateway und Spark Firewall sind verwundbar. Davon sind auch nicht mehr im Support befindliche Versionen betroffen.
Hackers abused Claude to extract secrets from 1.8M Android apps (2026-09-11 20:19 UTC)
Kurz: Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes. […]
Kurz: The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using credentials belonging to a police department employee. […]
Passkey-themed phishing attacks lead to Microsoft 365 data theft (2026-09-11 17:26 UTC)
Kurz: Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 servic…
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure (2026-09-11 16:30 UTC)
Kurz: GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score:…
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks (2026-09-11 16:15 UTC)
Kurz: Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka Zhipu), and MiniMax. Knowledge distillation…
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims (2026-09-11 14:29 UTC)
Kurz: Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the …
Kurz: A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert att…