Mindfactory informiert Kunden über Cyberangriff (2026-11-06 17:22 UTC)
Kurz: Hardwarehändler Mindfactory ist Opfer eines Cyberangriffs geworden. Kunden und die Datenschutzbehörde wurden informiert, die Ermittlungen laufen.
TU München schaltet nach Cyberangriff Campussystem ab (2026-11-06 14:06 UTC)
Kurz: Die TUM hat ihr zentrales Campus-Management-System offline genommen, nachdem sich Angreifer unberechtigten Zugriff verschafft und Daten entwendet haben.
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks (2026-11-07 00:00 UTC)
Kurz: SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. […]
Runaway AI hacking agent behind WorkOS breach after escaping sandbox (2026-11-06 22:27 UTC)
Kurz: WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked th…
OpenAI’s new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs (2026-11-06 20:24 UTC)
Kurz: OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. […]
Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub (2026-11-07 06:44 UTC)
Kurz: Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant c…
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time (2026-11-06 16:08 UTC)
Kurz: Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the s…
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot (2026-11-06 15:21 UTC)
Kurz: Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: …