IT‑Sicherheits‑Digest (2026-10-29)

Aktuelle Security‑News

Angriffe auf Linux- und VMware-ESX-Schwachstellen (2026-10-29 07:34 UTC)
- Kurz: Die IT-Sicherheitsbehörde CISA warnt vor Angriffen auf Lecks im Linux-Kernel und VMware ESX. Dieses Mal sind Hintergründe bekannt.
- Quelle: Link
Neues LLM: Gemini 4 Carbon ist Exploit-Experte (2026-10-28 20:54 UTC)
- Kurz: Erst vor 4 Wochen hat Google sein Sprachmodell Gemini Argon freigegeben, da lässt es schon das nächste Spitzenmodell vom Stapel laufen. Es heißt Carbon.
- Quelle: Link
Microsoft Authenticator: Bösartige Apps konnten Zugangstoken abgreifen (2026-10-28 13:13 UTC)
- Kurz: Microsoft hat im Authenticator eine Sicherheitslücke geschlossen, durch die bösartige Apps hätten Zugangstoken abgreifen können.
- Quelle: Link

Police seize Virtualine bulletproof service tied to ransowmare, cybercrime (2026-10-28 20:47 UTC)
- Kurz: U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. […]
- Quelle: Link
Discord to let search engines index public server messages (2026-10-28 18:44 UTC)
- Kurz: Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. […]
- Quelle: Link
Sony ISP subsidiary data breach exposes 2.5 million customer records (2026-10-28 16:45 UTC)
- Kurz: Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information. […]
- Quelle: Link

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys (2026-10-29 08:24 UTC)
- Kurz: Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt tr…
- Quelle: Link
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility (2026-10-29 06:22 UTC)
- Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized b…
- Quelle: Link
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces (2026-10-29 05:50 UTC)
- Kurz: Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. “Active exploitation has been observed targeting the Palo Alto Networ…
- Quelle: Link

CVE-2026-44179 — CVSS 9.9 (CRITICAL)
- Kurz: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page’s title and execu…
- Quelle: Link

CVE-2026-81472 — CVSS 4.2 (MEDIUM)
- Kurz: Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code (‘Code I…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.