Digital-Health-Podcast: Von Cyberrisiken bei Krankenhäusern und Medizinprodukten (2026-10-20 18:28 UTC)
Kurz: Offene Netze, fehlendes Personal, schnellere Angriffe: Martin Tettke erklärt im Podcast, wo Gesundheitseinrichtungen bei der IT-Sicherheit nachbessern müssen.
CA-Zertifikate gesperrt: Sicherheitsvorfall bei Zertifizierungsstelle eMudhra (2026-10-20 15:11 UTC)
Kurz: Die privaten Schlüssel waren trivial einfach zu raten; einer lautete „4“. Mit ihnen konnten Angreifer gültige TLS-Zertifikate für beliebige Domains ausstellen.
Stolen UpdraftCentral keys used to backdoor WordPress sites (2026-10-21 01:01 UTC)
Kurz: A threat actor breached TeamUpdraft’s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. […]
Mozilla, Google, Apple block compromised eMudhra CA certificates (2026-10-21 00:46 UTC)
Kurz: Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitim…
PHP warns admins of two critical flaws, emergency patches coming tomorrow (2026-10-20 20:56 UTC)
Kurz: The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. […]
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web (2026-10-21 07:44 UTC)
Kurz: State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India’s largest,…
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws (2026-10-21 07:26 UTC)
Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that’s collectively call…
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion (2026-10-21 06:05 UTC)
Kurz: A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dub…