IT‑Sicherheits‑Digest (2026-10-30)

Aktuelle Security‑News

Report: Cyberkriminelle nehmen Rechtssektor ins Visier (2026-10-30 08:28 UTC)
- Kurz: Anwaltskanzleien verwahren vertrauliche Pläne und sensible Mandantendaten – und geraten damit stärker ins Visier Cyberkrimineller. Welche Methoden die nutzen.
- Quelle: Link
Cisco-Firewalls und GitLab-Lücke werden angegriffen (2026-10-30 07:51 UTC)
- Kurz: Bösartige Akteure missbrauchen Schwachstellen in Ciscos SSL-VPN und GitLab. Updates stehen bereit, Admins sollten sie installieren.
- Quelle: Link
Hinter kritischen GitLab-Lücken stecken Fehler in der Regex-Engine von Ruby (2026-10-30 07:43 UTC)
- Kurz: Die kritischen GitLab-Lücken der letzten Wochen gehen auf drei jetzt behobene Fehler in Rubys Regex-Engine zurück. CVE-Scanner schlagen auf sie nicht an.
- Quelle: Link

OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut (2026-10-29 23:35 UTC)
- Kurz: OpenAI says it won’t reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. […]
- Quelle: Link
Binance probes potential $5.8 billion crypto-theft hack (2026-10-29 22:45 UTC)
- Kurz: Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. […]
- Quelle: Link
Hugging Face malware campaign returns to hijack GPUs for crypto mining (2026-10-29 22:09 UTC)
- Kurz: A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to t…
- Quelle: Link

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw (2026-10-30 07:45 UTC)
- Kurz: Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Cor…
- Quelle: Link
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV (2026-10-30 07:27 UTC)
- Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilit…
- Quelle: Link
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen (2026-10-30 04:14 UTC)
- Kurz: Cryptocurrency giant Binance said on Thursday that a “security incident” on its platform has impacted about $6.3 billion worth of assets. The world’s biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on…
- Quelle: Link

CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.