IT‑Sicherheits‑Digest (2026-10-27)

Aktuelle Security‑News

php2shell: Erfolgreiche Angriffe auf PHP-Schwachstelle bestätigt (2026-10-27 08:02 UTC)
- Kurz: Seit Bekanntwerden der php2shell-Schwachstelle laufen Angriffe darauf. Am Wochenende wurden erste erfolgreiche Attacken bestätigt.
- Quelle: Link
Cloudflare: Jahrelang Sicherheitsprobleme wie bei php2shell (2026-10-26 17:42 UTC)
- Kurz: Mit KI wird gerade jeglicher Code durchsucht. Laut Cloudflare ist noch jahrelang mit neuen, schweren Sicherheitslücken zu rechnen.
- Quelle: Link
Nachrichtendienste: BND und BfV wollen angeblich auf Google setzen (2026-10-26 13:04 UTC)
- Kurz: Die deutschen Nachrichtendienste wollen für den Austausch geheimer Daten Cloudtechnik von Google einsetzen. Das berichtet zumindest die Tagesschau.
- Quelle: Link

CISA confirms PHP2Shell vulnerabilities now exploited in attacks (2026-10-27 08:20 UTC)
- Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. […]
- Quelle: Link
University of Copenhagen data breach exposes data of 525,000 people (2026-10-26 22:20 UTC)
- Kurz: The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. […]
- Quelle: Link
Former pentester used ARTEX AI to steal 8.2 million data records (2026-10-26 21:08 UTC)
- Kurz: South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. […]
- Quelle: Link

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses (2026-10-27 06:34 UTC)
- Kurz: The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. “Cases of compromising IP cameras and DVRs with access to the video str…
- Quelle: Link
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution (2026-10-27 04:37 UTC)
- Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, b…
- Quelle: Link
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento (2026-10-26 18:12 UTC)
- Kurz: An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small …
- Quelle: Link

CVE-2026-107656 — CVSS 9.8 (CRITICAL)
- Kurz: An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0…
- Quelle: Link
CVE-2026-106174 — CVSS 7.5 (HIGH)
- Kurz: A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interfa…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.