Russlands „Super-App“ Max: Überwachung vorbei am Smartphone-OS (2026-09-21 04:21 UTC)
Kurz: Eine Studie legt das Ausmaß der Spionagefähigkeiten der russischen Super-App Max offen. Die staatlich verordnete Anwendung gilt als Muster digitaler Kontrolle.
Cyberangriff auf LMU München: Daten von Studierenden abgeflossen (2026-09-20 13:05 UTC)
Kurz: Name, Adresse, Bankverbindung, Bildungsabschlüsse – all diese Daten von Studierenden kamen der LMU München abhanden. Vieles ist allerdings noch unklar.
Kurz: An ongoing npm malware campaign involving the ‘indexed-btree’ package shows how threat actors bypass supply chain defenses by hiding malicious code in a package’s normal runtime behavior rather than in installation scripts. […]
Researchers escape OpenAI Codex sandbox to run commands on host (2026-09-20 12:00 UTC)
Kurz: Researchers escaped OpenAI’s Codex sandbox two ways, one running commands on a developer’s machine from its most locked-down mode. OpenAI has patched both. […]
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors (2026-09-21 06:06 UTC)
Kurz: The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based “much smaller organization” in the information technology (IT) services industry, once again highlighting how the adversary continues …