Tageszusammenfassung - 22.10.2026

End-of-Day report

Timeframe: Mittwoch 21-10-2026 18:00 – Donnerstag 22-10-2026 18:00
Handler: Katharina Siess
Co-Handler: Guenes Holler

News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.

https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

Fortinet Releases Security Hardening Release for Multiple Products

On October 22, 2026, Fortinet will release a coordinated set of security updates for FortiOS, FortiManager, and FortiAnalyzer following recent releases from FortiMail and FortiAuthenticator. We strongly urge every customer to plan and promptly complete these upgrades as soon as the releases are available, prioritizing internet-facing devices.

https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code.

https://thehackernews.com/2026/10/new-qpack-flaws-can-crash-http3-servers.html

Fake-Shops und verbilligte Storno-Geräte: Mediamarkt als Köder für mehrere Betrugsmaschen

Mediamarkt zählt hierzulande zu den absoluten Branchenriesen im Bereich Multimedia und Elektronik. Ein Status, den sich aktuell vermehrt Kriminelle zu Nutze machen wollen. Sie bauen nicht nur Mediamarkt-Fakeshops, sondern versenden außerdem noch Angebote zu angeblich verbilligte Stornoware an Unternehmen. In beiden Fällen ist das Auslösen einer Überweisung das Ziel.

https://www.watchlist-internet.at/news/fake-shops-stornoggeraete-mediamarkt/

Vulnerabilities

Kritische Codeausführung: GitLab veröffentlicht dringende Sicherheitsupdates

Mit Updates für mehrere Versionszweige schließt GitLab zwölf Sicherheitslücken, darunter auch eine kritische Lücke zur Remote-Codeausführung.

https://www.heise.de/news/GitLab-schliesst-kritische-Sicherheitsluecke-und-elf-weitere-Schwachstellen-11496485.html

Passwortmanager ohne Cloud-Zwang: Update für KeePassXC

KeePassXC 2.8.0 schließt Sicherheitslücken, unterstützt Auto-Type unter Wayland und ermöglicht den Datenbankabgleich über externe Programme.

https://www.heise.de/news/Passwortmanager-ohne-Cloud-Zwang-Update-fuer-KeePassXC-11497220.html

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. […] CISA has directed federal agencies to prioritize patching systems affected by Plex2Shell vulnerabilities or apply mitigations by October 23.

https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/

Cisco Expressway Series Security Hardening Release: October 2026

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gtpcodec-dos-Rmecfepz

Drupal: Critical and moderately critical security advisories announced

https://www.drupal.org/security

TYPO3-PSA-2026-001: Critical PHP security release: PHP update required for all TYPO3 installations

https://news.typo3.com/article/typo3-psa-2026-001

SVD-2026-1010: Security Vulnerabilities in Splunk SOAR – October 2026

https://advisory.splunk.com/advisories/SVD-2026-1010

LWN Security updates for Thursday