IT‑Sicherheits‑Digest (2026-11-10)

Aktuelle Security‑News

heise security

  • Online-Banking geknackt – Betrüger muss jahrelang in Haft (2026-11-10 08:25 UTC)
    • Kurz: Der Fall führte Ermittler durch ein komplexes System aus Pseudonymen und Krypto-Konten. Welche Strafen und finanzielle Folgen das für den 36-Jährigen hat.
    • Quelle: Link
  • Chrome-Update stopft attackiertes Sicherheitsleck (2026-11-10 07:57 UTC)
    • Kurz: Google hat ein Update für den Webbrowser Chrome veröffentlicht. Die Entwickler warnen, dass eine Lücke bereits angegriffen wird.
    • Quelle: Link
  • Anthropic Claude Fable 5.2 ist günstiger, aber Tempo kostet extra (2026-11-10 04:45 UTC)
    • Kurz: Anthropic veröffentlicht Claude Fable 5.2 und Claude Mythos 5.2 veröffentlicht. Wer schnellere Ausgaben wünscht, darf das Doppelte zahlen.
    • Quelle: Link

BleepingComputer

  • Google patches eighth Chrome zero-day exploited in attacks this year (2026-11-10 08:51 UTC)
    • Kurz: Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. […]
    • Quelle: Link
  • Fireworks AI discloses new breach after cloud provider hack (2026-11-10 07:49 UTC)
    • Kurz: AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider. […]
    • Quelle: Link
  • Vanderbilt University hit in BYOD ransomware attack, data theft claimed (2026-11-09 23:52 UTC)
    • Kurz: Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university’s databases and stolen sensitive student, employee, and research data. […]
    • Quelle: Link

The Hacker News

  • Anthropic’s Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark (2026-11-10 08:16 UTC)
    • Kurz: Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers “complete ot…
    • Quelle: Link
  • Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 (2026-11-10 06:52 UTC)
    • Kurz: Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has…
    • Quelle: Link
  • N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits (2026-11-10 06:44 UTC)
    • Kurz: N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell…
    • Quelle: Link

Neue CVEs (letzte 24h, NVD‑Abgleich)

Fortinet FortiGate (7.4.x)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

Atlassian (Jira/Confluence)

  • Keine neuen Treffer in den erfolgreich abgefragten NVD‑Daten der letzten 24h.

HPE/Aruba Switches

  • CVE-2026-95778 — CVSS 8.8 (HIGH)
    • Kurz: A remote code execution vulnerability exists in HPE Morpheus Software.
    • Quelle: Link
  • CVE-2026-95779 — CVSS 8.8 (HIGH)
    • Kurz: An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager software.
    • Quelle: Link

VMware ESXi/vCenter (7.x)

  • CVE-2026-91754 — CVSS 8.1 (HIGH)
    • Kurz: Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
    • Quelle: Link
  • CVE-2026-91755 — CVSS 8.1 (HIGH)
    • Kurz: Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
    • Quelle: Link
  • CVE-2026-91756 — CVSS 8.1 (HIGH)
    • Kurz: OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
    • Quelle: Link
  • CVE-2026-91757 — CVSS 7.1 (HIGH)
    • Kurz: OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01.
    • Quelle: Link

Hinweis

  • CVE‑Treffer sind ein Frühwarn‑Check (NVD) und müssen für eure exakten Versionen/Deployments gegengeprüft werden (Vendor Advisory/Patches).
  • News-Auswahl: nur frische Meldungen aus den letzten 36 Stunden; Dubletten aus dem Vortags-Digest werden ausgeblendet.