AusweisApp: Zertifikate von der Bundesdruckerei überraschend zurückgezogen (2026-09-26 14:20 UTC)
Kurz: Seit kurzer Zeit werden die Zertifikate der AusweisApp-Website von mehreren Browsern nicht mehr akzeptiert. Die Vergabestelle D-Trust hat sie zurückgezogen.
Kurz: The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat actors to resume widespread exploitation of a flaw on vulner…
Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer (2026-09-26 16:26 UTC)
Kurz: Anthropic’s Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5. […]
Microsoft pauses KB5002907 update after Office license deactivations (2026-09-26 15:50 UTC)
Kurz: Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations. […]
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation (2026-09-27 07:47 UTC)
Kurz: Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26. Citrix has not conf…
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials (2026-09-26 18:22 UTC)
Kurz: The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, whi…
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells (2026-09-26 11:46 UTC)
Kurz: Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (…