Mutmaßlicher Cyberangriff auf Online-Händler Asos (2026-10-07 04:36 UTC)
Kurz: Der britischen Online-Händler Asos ist weltweit aktiv. Am Dienstag kam es zu einem Zwischenfall – über die App wurde ein kryptischer Text angezeigt.
Ninja Forms plugin flaw exploited to hack WordPress sites (2026-10-06 21:00 UTC)
Kurz: Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. […]
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland (2026-10-06 19:21 UTC)
Kurz: On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. […]
Atlassian warns of critical file-access flaw in Jira, Confluence (2026-10-06 17:34 UTC)
Kurz: Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. […]
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer (2026-10-07 06:57 UTC)
Kurz: The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stea…
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes (2026-10-06 18:38 UTC)
Kurz: Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta…
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan (2026-10-06 18:24 UTC)
Kurz: Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name thei…
Kurz: Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on…
Kurz: Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent …
Kurz: A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an a…
Kurz: A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation c…
Kurz: An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation …
Kurz: Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successfu…
Kurz: VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute …
Kurz: VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual…