„Passwort“ Folge 67: IT-Security-Probleme sind vielfältig und oft althergebracht (2026-09-30 07:00 UTC)
Kurz: Im Podcasts geht es hauptsächlich um diverse Sicherheitslücken und Bugs. Die sind aus unterschiedlichen Gründen relevant – aber allesamt sehr interessant.
Signal adds encypted local backup support to iOS, desktop apps (2026-09-29 21:30 UTC)
Kurz: Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported operating systems (Android, iOS, Linux, macOS, and Windows). […]
Custom ChatGPTs push ClickFix attacks to deploy RAT malware (2026-09-29 20:59 UTC)
Kurz: Custom variants of OpenAI’s ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware. […]
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution (2026-09-30 05:30 UTC)
Kurz: Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-88772 (C…
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks (2026-09-29 17:47 UTC)
Kurz: An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France’s national cybersecurity agency saw …
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses (2026-09-29 17:20 UTC)
Kurz: A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language runtimes, and the operating system ke…
Kurz: Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could …
Kurz: Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful…
Kurz: Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow…