Ecovacs: Roboterhersteller offenbar Opfer von Datendiebstahlheise Security Quelle: Heise Security Ticker
Over two dozen organizations built a shared platform to triage vulnerabilities, fix them, and secure the software before patches arrive. The post Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure appeared first on SecurityWeek.
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Zero-Day Leads to Root CVE-2026-20262 is a zero-day vulnerability in Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) that lets an authenticated attacker with low privileges (at least write access) write files to unintended locations on the server. The flaw sits in the web UI / API file upload flow, where […]
Attackers are now exploiting several critical vulnerabilities in Fortinet’s FortiSandbox cyber threat detection platform, according to threat intelligence company Defused. […]
Windows variants for the SprySOCKS Linux malware have been used in attacks targeting government organizations in at least four countries. […]
Kubernetes-Cluster lassen sich auf mehreren Ebenen analysieren, denn Konfiguration, Container-Images, Dateisystemrechte und RBAC-Rollen bestimmen gemeinsam die Sicherheitslage. Selbst ein lokaler Minikube-Testcluster offenbart dabei erhebliche Schwachstellen und Fehlkonfigurationen. kube-bench und Trivy machen diese Risiken systematisch sichtbar und liefern die Grundlage für gezielte Härtungsmaßnahmen.
iX-Workshop: Industrial Security nach IEC 62443 – Ein Praxisleitfadenheise-AngebotiX Magazin Quelle: Heise Security Ticker