Erstmals geknackt: Calif.io durchbricht iOS-Blockierungsmodus, überlebt Update (2026-11-04 12:06 UTC)
Kurz: Das Security-Team Calif.io hat nach dem ersten Untethered-Jailbreak für iOS 27 nun auch Apples Lockdown-Mode überwunden. Doch das ist nicht alles.
Vercel rolls out new protection against stolen session cookie attacks (2026-11-04 21:31 UTC)
Kurz: Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware. […]
Kurz: Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. […]
DreamHost confirms data breach exposed FTP logins and webmail sessions (2026-11-04 19:05 UTC)
Kurz: DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers’ FTP/SFTP usernames and passwords. […]
Kurz: Zyxel GS1900 network switches that received the vendor’s earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch’s web management …
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says (2026-11-05 05:17 UTC)
Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active…
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run (2026-11-05 04:31 UTC)
Kurz: OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. “Our prototype i…