Phishing-Angriffe mit echten Hotel-Buchungsdaten (2026-09-25 12:44 UTC)
Kurz: Über eine Schwachstelle bei HotelNetSolutions wurden Buchungsdaten von Hotelgästen abgegriffen. Kriminelle nutzen sie für glaubhafte Phishing-Nachrichten.
Knapp 10.000 Rufnummern von Cyberkriminellen abgeschaltet (2026-09-25 11:43 UTC)
Kurz: Mit internationalen Partnern gehen Ermittler aus Baden-Württemberg und Deutschland gegen betrügerische Anrufe und manipulierte Handelsplattformen vor.
Server am Samstagmorgen herunterfahren: Kiteworks warnt Admins vor Zero-Day (2026-09-25 11:41 UTC)
Kurz: Man habe konkrete Hinweise von Strafverfolgern auf eine Attacke, schreibt der Hersteller seinen Kunden. Auch hierzulande sind große Unternehmen betroffen.
Kiteworks urges 6-hour server shutdown over potential zero-day attacks (2026-09-25 21:41 UTC)
Kurz: Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. […]
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw (2026-09-25 20:57 UTC)
Kurz: The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path trav…
Kurz: A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. […]
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware (2026-09-25 14:44 UTC)
Kurz: Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed…
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence (2026-09-25 13:18 UTC)
Kurz: Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaS…
The SOC Doesn’t Need to Start Over with Every Alert (2026-09-25 11:30 UTC)
Kurz: Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker land…
Kurz: An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to val…