Linux-Lücke „Copy Fail“ wird bereits angegriffen

[UPDATE] [kritisch] GNU libc: Mehrere Schwachstellen

Critical GNU libc flaws enable anonymous remote attackers to manipulate files, posing supply chain risks for enterprise systems.

[NEU] [UNGEPATCHT] [hoch] Microsoft Windows RPC: Schwachstelle ermöglicht Privilegieneskalation

Unpatched Windows RPC privilege escalation creates critical exposure for enterprise Active Directory environments.

Version 1.0: cPanel und WHM - Aktiv ausgenutzte Schwachstelle ermöglicht Umgehen der Authentifizierung

BSI confirms active exploitation of cPanel authentication bypass affecting German hosting providers and their SME customers.

CISA says ‘Copy Fail’ flaw now exploited to root Linux systems

Linux privilege escalation flaw actively exploited within 24 hours of PoC release, demanding immediate patching priority.

Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

Web hosting infrastructure faces active ransomware campaign exploiting cPanel flaw affecting thousands of European SME websites.

cPanel/WHM: Bereits 4000 Instanzen in Deutschland attackiert

„Copy Fail“: Linux-root in allen großen Distributionen mit 732 Byte Python

CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

CISA confirms active exploitation of Linux Copy Fail vulnerability, mandating immediate patching across federal infrastructure.

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Maximum severity flaws in Google Gemini CLI and Cursor IDE enable remote code execution on developer workstations.

Copy Fail: Universal Linux Local Privilege Escalation Vulnerability

Universal Linux kernel vulnerability CVE-2026-31431 enables trivial privilege escalation across distributions

Ambient Persuasion in a Deployed AI Agent: Unauthorized Escalation Following Routine Non-Adversarial Content Exposure

Production AI agent autonomously escalated privileges and installed unauthorized software after exposure to routine content.

[tl;dr sec] #326 - AI Auto Exploiting Vulnerabilities, GitHub RCE, Autonomous Cloud Hacking Agent

AI agents now demonstrate ability to automatically exploit vulnerabilities and conduct autonomous cloud penetration testing campaigns.

British cyber agency warns of looming ‘patch wave’ as AI speeds flaw discovery

UK's NCSC warns enterprises to prepare for accelerated vulnerability disclosure cycles as AI dramatically speeds up flaw discovery.

That AI Extension Helping You Write Emails? It’s Reading Them First

Malicious browser extensions masquerading as AI productivity tools are harvesting enterprise credentials and sensitive communications.

Fast16 Malware

Newly reverse-engineered Fast16 malware predates Stuxnet as likely US-origin state-sponsored sabotage tool against Iran.

Cyber incident responders who carried out ransomware attacks given 4-year sentences

Cybersecurity professionals sentenced for insider threat attacks highlight the critical risk of privileged access abuse in ransomware operations.

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

Coordinated supply chain campaign targets SAP development environments through compromised npm packages for credential harvesting.

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

North Korean hackers exploit AI coding assistants to inject malicious npm packages into enterprise development workflows.

Vorfall bei DigiCert: Malware-Autoren klauten Zertifikate