IT‑Sicherheits‑Digest (2026-10-04)

Aktuelle Security‑News

heise security

  • Netscaler-Admins aufgepasst: Zero-Day verursacht Crashes und Codeausführung (2026-10-03 08:23 UTC)
    • Kurz: Sicherheitsforscher und Administratoren melden massenhafte Spontanreboots betroffener Geräte. Diese waren auf dem neuesten Patchstand.
    • Quelle: Link

BleepingComputer

  • Google Gemini could soon get full access to your Mac’s files, apps and the web (2026-10-03 23:12 UTC)
    • Kurz: Google’s Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. […]
    • Quelle: Link
  • ShinyHunters hacker reportedly detained in Jordan, aiding FBI (2026-10-03 19:09 UTC)
    • Kurz: A suspected ShinyHunters hacking group member known online as “Rey” has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. […]
    • Quelle: Link
  • Danish university DTU breach exposes data of up to 200,000 people (2026-10-03 14:35 UTC)
    • Kurz: The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. […]
    • Quelle: Link

The Hacker News

  • ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members (2026-10-04 07:22 UTC)
    • Kurz: A suspected member of the ShinyHunters digital extortion group, who goes by the online alias “Rey,” has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name i…
    • Quelle: Link
  • China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing (2026-10-04 07:20 UTC)
    • Kurz: A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations. …
    • Quelle: Link
  • MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics (2026-10-03 14:38 UTC)
    • Kurz: The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing’s state security service. In a “Security Service Espionage Alert” i…
    • Quelle: Link

Neue CVEs (letzte 24h, NVD‑Abgleich)

Fortinet FortiGate (7.4.x)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

Atlassian (Jira/Confluence)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

HPE/Aruba Switches

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

VMware ESXi/vCenter (7.x)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

Hinweis

  • CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
  • News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.