IT‑Sicherheits‑Digest (2026-11-01)

Aktuelle Security‑News

heise security

  • Popcorn Time: Verlassene Update-Server bedrohten Mac-Nutzer (2026-10-31 11:18 UTC)
    • Kurz: Der P2P-Streamingdienst, gegen den Hollywood einst Sturm lief, ist kaum noch bekannt. Wer einen Client auf dem Mac installiert hat, sollte dennoch aufmerken.
    • Quelle: Link

BleepingComputer

  • Northflank security breach leads to abuse of customers’ AI API keys (2026-10-31 18:01 UTC)
    • Kurz: Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers’ AI API keys. […]
    • Quelle: Link
  • New Android SMS of Death exploit can remotely crash unpatched phones (2026-10-31 15:35 UTC)
    • Kurz: A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed “SMS of Death” and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sendin…
    • Quelle: Link
  • Reddit to lock content behind logins to fight scrapers (2026-10-31 14:05 UTC)
    • Kurz: Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a “logged-in service,” offering limited access to visitors without accounts. […]
    • Quelle: Link

The Hacker News

  • Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script (2026-11-01 07:25 UTC)
    • Kurz: Malicious code on the website of prediction market Polymarket sold some signed-in traders’ positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company.…
    • Quelle: Link
  • NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection (2026-11-01 07:02 UTC)
    • Kurz: Cybersecurity researchers have disclosed details of what has been described as a “highly sophisticated infection chain” targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 …
    • Quelle: Link
  • FBI Links North Korea’s TraderTraitor to Record $6.43 Billion Binance Crypto Heist (2026-11-01 06:44 UTC)
    • Kurz: The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG…
    • Quelle: Link

Neue CVEs (letzte 24h, NVD‑Abgleich)

Fortinet FortiGate (7.4.x)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

Atlassian (Jira/Confluence)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

HPE/Aruba Switches

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

VMware ESXi/vCenter (7.x)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

Hinweis

  • CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
  • News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.