Praxisnahe Schritt-für-Schritt Anleitungen für UniFi, Firewalls (OPNsense), WireGuard & Server-Sicherheit – plus täglich aktualisierte CVE-Schwachstellen.
🎉 NetTopo ist jetzt Released!
Netzwerk-Topologien einfach im Browser planen - das kostenlose Tool für Netzwerk-Administratoren
Umfassendes Tutorial zu NetTopo v3.0: KI-gestützte Netzwerkplanung mit Groq Cloud, Auto-Organize, Live-Ping, Netzwerk-Scanner und Export in PNG/PDF/JSON. Jetzt auch als Android App.
Von NetzBastion getestete & empfohlene Sicherheits- und Netzwerk-Hardware
Zuletzt aktualisiert: 22.10.2026, 11:28:59
CVE-2026-48449 - Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could resu
CVE-2026-67429 - Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.dow
CVE-2026-16326 - In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless
CVE-2026-54735 - Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Pr
CVE-2026-58162 - The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled clien
Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek.
Mehr lesenLiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.
Mehr lesenLiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.
Mehr lesenLaw enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]
Mehr lesenLaw enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]
Mehr lesenNode.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of their choosing on the affected system. Each supported line has one fixed version:
Mehr lesenNode.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of their choosing on the affected system. Each supported line has one fixed version:
Mehr lesenThe $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on SecurityWeek.
Mehr lesenThe $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on SecurityWeek.
Mehr lesenA remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the server to use thousands of times more memory than it received, enough to run a default server
Mehr lesen