Archiv für Juni 2026

📄
security

CISA Adds Three Known Exploited Vulnerabilities to Catalog

von CISA Current Activity •

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability These types of vulnerabilities […]

Mehr lesen →
📄
soc

Shai-Hulud Hades PyPI Campaign: 19 Packages Trojanized via Wheel Startup Hooks

von SOCRadar •

Shai-Hulud Hades PyPI Campaign: 19 Packages Trojanized via Wheel Startup Hooks A PyPI supply-chain campaign in the Shai-Hulud / Mini Shai-Hulud / Miasma lineage compromised 19 Python packages by shipping trojanized wheel artifacts. Researchers observed 37 malicious wheels that add a Python startup hook (*.pth) to trigger code execution, then bootstrap a Bun runtime to […]

Mehr lesen →
📄
security

eIDAS 2.0 in der Praxis

von Security Insider •

Mit eIDAS 2.0 liegt ein klarer europäischer Rahmen für digitale Identitäten vor. Welche Rolle spielen IT-Systemhäuser beim Aufbau skalierbarer Lösungen und der Integration digitaler Identitäten in bestehende IT-Landschaften?

Mehr lesen →