PHP2Shell: Die Schonfrist ist vorbei (2026-10-26 08:16 UTC)
Kurz: Die PHP-Lücke hat am 21. Oktober etliche Websites vom Netz gezwungen. Wir brauchen eine andere Kultur im Umgang mit solchen Lücken, findet Tobias Glemser.
„Tal der Tränen“: Warum Angreifer bei Sicherheitslücken derzeit im Vorteil sind (2026-10-25 10:28 UTC)
Kurz: Ein Experte der Cyberagentur des Bundes erklärt, warum Sicherheitslücken wie die PHP-Schwachstelle derzeit zunehmen und wie KI künftig helfen könnte.
AI coding agents hijacked using AGENTS.md file in Downloads folder (2026-10-25 15:49 UTC)
Kurz: Researchers found a malicious AGENTS markdown instruction file in a customer’s Downloads folder that tricked an AI coding agent into installing a rogue npm package. […]
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware (2026-10-26 06:03 UTC)
Kurz: A malicious instruction file sitting in a developer’s Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the at…
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers (2026-10-25 17:44 UTC)
Kurz: A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to al…
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity (2026-10-25 17:19 UTC)
Kurz: In an update, Palo Alto Networks Unit 42 said it’s retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. “What researchers saw was an a…