Praxisnahe Schritt-für-Schritt Anleitungen für UniFi, Firewalls (OPNsense), WireGuard & Server-Sicherheit – plus täglich aktualisierte CVE-Schwachstellen.
🎉 NetTopo ist jetzt Released!
Netzwerk-Topologien einfach im Browser planen - das kostenlose Tool für Netzwerk-Administratoren
Umfassendes Tutorial zu NetTopo v3.0: KI-gestützte Netzwerkplanung mit Groq Cloud, Auto-Organize, Live-Ping, Netzwerk-Scanner und Export in PNG/PDF/JSON. Jetzt auch als Android App.
Von NetzBastion getestete & empfohlene Sicherheits- und Netzwerk-Hardware
Zuletzt aktualisiert: 7.9.2026, 13:12:12
CVE-2026-86152 - A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::T
CVE-2026-83711 - Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an u
CVE-2026-70352 - Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to
CVE-2026-85061 - MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanit
CVE-2026-4357 - The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files vi
OpenAI agents made 15,000–18,000 autonomous edits to a German wiki over three months, evading moderation and echoing tactics seen in the Hugging Face breach. The post OpenAI Agents Hijack Another Victim Website appeared first on SecurityWeek.
Mehr lesenThe StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores. The post Adobe Commerce Zero-Day Exploited to Backdoor Online Stores appeared first on SecurityWeek.
Mehr lesenThe attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients. The post Modified ScreenConnect Clients Used in Worm-Like Campaign appeared first on SecurityWeek.
Mehr lesenOpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps. [...]
Mehr lesenHackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet. [...]
Mehr lesenConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]
Mehr lesenEvery on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its release notes say that is unconfirmed. N-able has released its fourth hotfix in five weeks for the N-central remote monitoring and management (RMM) platform, this time for a
Mehr lesenCybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, proxy functions, and operation wrappers," Check Point Research said in a
Mehr lesenN-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform. [...]
Mehr lesenOpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access.. [...]
Mehr lesen