Timeframe: Freitag 23-10-2026 18:00 – Dienstag 27-10-2026 18:00
Handler: Katharina Siess
Co-Handler: Guenes Holler
News
Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
A critical vulnerability, tracked as CVE-2026-111497 and referred to as Broccoli2Shell, has been identified in the Brotli decompression library. The vulnerability affects multiple widely used technologies, including Node.js, Bun, Envoy Proxy, and more. Successful exploitation could allow an unauthenticated remote attacker to trigger memory corruption, disclose sensitive information, crash affected processes, or potentially achieve remote code execution (RCE). Organizations using affected components to decompress untrusted Brotli-compressed data are advised to prioritize remediation.
https://www.wiz.io/blog/cve-2026-111497-brotli-rce-node-js
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
Angriffe auf Arista VeloCloud und Collabora/Nextcloud beobachtet
Angreifer nutzen eine Lücke in Collabora und installieren Webshells auf Nextcloud-Servern. Auch Arista VeloCloud wird attackiert.
Das Wohnungsinserat als Einfallstor für Schadsoftware
Der Immobilienmarkt ist angespannt. Stolpert man zufällig über eine leistbare Wohnung in guter Umgebung, soll es nach Möglichkeit entsprechend schnell gehen. Kontaktaufnahme, Besichtigungstermin, Unterschrift. Eine Situation, in der Menschen eventuell unvorsichtiger reagieren als sonst. Und genau darauf setzen die Kriminellen. Sie nutzen diese positive Aufregung, um über ein Formular Schadsoftware auf die Endgeräte ihrer Opfer zu schleusen.
https://www.watchlist-internet.at/news/wohnungsinserat-einfallstor-schadsoftware/
AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customers Downloads folder that tricked an AI coding agent into installing a rogue npm package.
DreamHost forces password resets in ongoing "incident"
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface.
Wegen Schadcode-Lücke: Forscher legen millionenfach installierten Updater still
Angreifer hätten Millionen von Geräten über eine Lücke in einem veralteten Popcorn-Time-Fork kapern können. Wie Forscher das verhindert haben.
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.
https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html
Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
As interest in new AI tools accelerates, cybercriminals are finding ways to exploit the trust surrounding them. Check Point Research (CPR) has uncovered Yoba, a malware campaign using fake GitHub projects impersonating supposed ChatGPT and Claude desktop applications, while abusing legitimate, signed OpenAI and Anthropic executables to help load malware.
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals.
https://hackread.com/specter-usb-power-signals-air-gapped-pcs-leak-data/
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown
StealC-s seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5.
https://hackread.com/stealc-malware-stadia-rat-operation-endgame-takedown/
CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security
The strategy addresses an increasingly complex threat environment, strengthens national cyber defense, and prioritizes the infrastructure most essential to America-s national security, economy, public health, and safety.
[…]
Content was trimmed to protect the source. Please visit the original article for the full text.
Lesen Sie den originalen Artikel: