Timeframe: Donnerstag 15-10-2026 18:00 – Freitag 16-10-2026 18:00
Handler: Michael Schlagenhaufer
Co-Handler: Guenes Holler
News
Targeted ads delivered 0-click exploits to install mercenary malware
Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices of targeted individuals when they did nothing other than load a website or open an installed app.
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims- internet connections through a commercial residential proxy network.
Schluss mit -digitalen Inseln-: Bund und Gemeinden starten neue Datenplattform
Staatssekretär Pröll und Gemeindebund-Präsident Pressl präsentierten am Freitagmorgen die neue -Gemeindedatenplattform-.
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Unit 42 identified a campaign targeting government entities and state-affiliated infrastructure, with observed activity spanning from October 2025-April 2026. We track this activity as CL-UNK-1211.
https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure/
Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign
A calendar invite is one of the most routine messages in the modern workplace. It lands in the inbox, asks for a few seconds of attention, and is rarely questioned. Attackers know this, and they are now using fake meeting invitations to steal Microsoft account credentials.
User refused to change her password because everyone already knew it
School staff seemed to be trying to get ransomware – for a second time.
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or install malware on targeted devices. Election officials, candidates, and political organizations may be attractive targets because of their access to voter registration data, current government officials, and sensitive campaign information.
EuGH: Banken müssen Phishing-Schaden erst einmal erstatten
In einem Fall von Phishing-Betrug stellt der EuGH klar, dass Banken den Schaden grundsätzlich erst einmal ersetzen müssen – mit nur einer Ausnahme.
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
Vulnerabilities
BeyondTrust patches zero-day exploited in attacks since August
Tracked as CVE-2026-102764, this actively exploited authentication bypass vulnerability lets unprivileged remote attackers perform file operations on unpatched appliances and affects RS 26.2.3 or earlier. BeyondTrust patched the security issue for all Remote Support and Privileged Remote Access SaaS customers on October 8, but self-hosted installations must be patched manually if automatic updates are not enabled.
Zweites Update in einer Woche: Google schließt erneut kritische Lücke in Chrome
Google hat in dieser Woche ein zweites Sicherheitsupdate für seinen Browser Chrome veröffentlicht. Es schließt wieder eine kritische Lücke, die Nutzer unter Windows, MacOS, Linux und Android betrifft. Aufgrund des hohen Schweregrads ist es möglich, aus der Ferne Schadcode in den Browser einzuschleusen und außerhalb seiner Sandbox auszuführen.
LWN Security updates for Friday
Lesen Sie den originalen Artikel: