EU prüft OpenAI nach nicht gemeldetem Sicherheitsvorfall (2026-09-18 16:21 UTC)
Kurz: Nach einem Vorfall beim Software-Register RubyGems meldete OpenAI diesen nicht der EU. Die europäischen Behörden prüfen nun die Einhaltung des AI Acts.
Quellcode geklaut: Unbekannte steigen per Supply-Chain-Angriff bei CrowdSec ein (2026-09-18 15:39 UTC)
Kurz: Vor vier Monaten gelangten über dreihundert Repositories in fremde Hände. Doch die Auswirkungen des Angriff von Mai schätzt der WAF-Hersteller als gering ein.
Jetzt aktualisieren: Angreifer konnten beliebige Daten von Synology-NAS auslesen (2026-09-18 15:06 UTC)
Kurz: Gleich auf drei verschiedenen Wegen konnten Angreifer Daten von Synology-NAS klauen. Der Hersteller behebt mit einem Flicken auch weniger dringende Lücken.
Gyazo server flaw exploited to steal 23.6 million user records (2026-09-18 16:00 UTC)
Kurz: The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. […]
Kurz: An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. […]
Secure enterprise sharing with access reviews for Microsoft 365 (2026-09-18 14:00 UTC)
Kurz: Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little visibility into who can still reach sensitive data. tenfold Software explains how centralized access …
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories (2026-09-19 07:14 UTC)
Kurz: An attacker copied about 170 of CrowdSec’s private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says h…
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild (2026-09-19 06:24 UTC)
Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabiliti…
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root (2026-09-18 18:02 UTC)
Kurz: A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine. Kernel maintainers have fixed all four over the past few weeks, so a system …
Kurz: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages…
Kurz: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values.
Kurz: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when re…
Kurz: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.
Kurz: IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster mi…