News
SecScore ●●●○○ 01.11. 16:11
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over con…
BleepingComputer
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●●○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 15:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
MSRC Advisories
CVE
SecScore ●●●○○ 31.10. 09:13
Information published.
MSRC Advisories
Malware
SecScore ●●●○○ 31.10. 02:02
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.
The post Inside a malicious Claude Code-branded extension and its persistent SSH backdo…
Microsoft Security
Microsoft
SecScore ●●●○○ 30.10. 17:11
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos.
The post From help desk impersonation to AD CS abuse: Investigatin…
Microsoft Security
CVE
SecScore ●●●○○ 30.10. 15:46
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek.
Security Week
APT
SecScore ●●●●○ 30.10. 15:08
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released.
The vulnerability, which does not have a CVE identifier, relates to a case of …
The Hacker News
APT
SecScore ●●●●○ 30.10. 13:04
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWe…
Security Week
Microsoft
SecScore ●●●○○ 30.10. 12:20
Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...]
BleepingComputer
APT
SecScore ●●○○○ 30.10. 11:08
DoublePulsar
Microsoft
SecScore ●●○○○ 30.10. 10:27
Microsoft Ignite vom 17. bis 20. November 2026: KI- und Cloud-Praxiswissen vor Ort in San Francisco oder kostenlos online.
MS Techwiese
Microsoft
SecScore ●●○○○ 30.10. 08:36
25 Neuerungen für mehr digitale Souveränität: Microsoft macht Kontrollen in der Public Cloud nachvollziehbarer und bringt Datenbanken, KI und GitHub auf eigene Hardware.
MS Techwiese
Microsoft
SecScore ●●●○○ 30.10. 08:35
Fabric IQ in Copilot, Agenten für Data Engineering und Datenbanken, SQL Server für souveräne Umgebungen: Erfahre, was Microsoft auf FabCon und SQLCon angekündigt hat.
MS Techwiese
CVE
SecScore ●○○○○ 29.10. 19:00
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.
The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2…
Unit 42
Microsoft
SecScore ●●●●○ 29.10. 17:00
Security, compliance, and operations teams can use this hardware-originated evidence for monitoring, compliance reporting, and forensic investigations.
The post Azure Cloud HSM Hardware Audit Logging: Verifiable audit t…
Azure Security Blog
APT
SecScore ●●●○○ 29.10. 17:00
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their use of AI with varying…
Microsoft Security
Microsoft
SecScore ●●●○○ 29.10. 17:00
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises.
The post IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for E…
Microsoft Security
Ransomware
SecScore ●●●○○ 29.10. 15:00
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
Talos Intelligence
Microsoft
SecScore ●●●●○ 29.10. 12:39
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act.
Advanced AI models can now help attackers discover vulnerabilities, generate ex…
The Hacker News
Microsoft
SecScore ●●●○○ 29.10. 10:12
Microsoft erweitert die SAP-Integration um MCP-Anbindung, OAuth 2.0 für den SAP OData Connector sowie neue Backup- und Automatisierungsfunktionen.
MS Techwiese
CVE
SecScore ●●●○○ 29.10. 10:05
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October.
The flaw, CVE-2026-97229 …
The Hacker News
APT
SecScore ●●●○○ 29.10. 06:50
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces.
"Active exploitation has been observed targetin…
The Hacker News
CVE
SecScore ●●●●● 28.10. 22:32
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthoriz…
Talos Intelligence
CVE
SecScore ●●●●○ 28.10. 19:08
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access.
"Fir…
The Hacker News
Ransomware
SecScore ●●○○○ 28.10. 19:00
Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust.
The post Unwrapping Retail Peak Season Cyber Threats appeared first …
Unit 42
Microsoft
SecScore ●●●○○ 28.10. 17:23
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown.
Orange Tsai of DEVCORE publish…
The Hacker News
Microsoft
SecScore ●●●○○ 28.10. 17:00
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and modernizing defense to keep pace with AI-powered threats. Aarti Borkar sh…
Microsoft Security
CVE
SecScore ●●●●○ 28.10. 13:48
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber.
The vulnerability in question is CVE-2026-101767 (C…
The Hacker News
News
SecScore ●●●○○ 28.10. 12:15
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation.
T…
The Hacker News
CVE
SecScore ●●●○○ 28.10. 01:00
Sophos X-Ops
Microsoft
SecScore ●●●○○ 27.10. 08:29
Azure Copilot für Azure Local übersetzt Fragen in natürlicher Sprache in geführte Troubleshooting-Workflows und soll Anfang 2027 in die Public Preview starten.
MS Techwiese
Microsoft
SecScore ●●○○○ 26.10. 09:20
Im einstündigen Online-Briefing am 1. Dezember erfährst du, was Fabric IQ, IQ Sharing in OneLake, die neuen Fabric Agents und der Database Hub für deine Datenstrategie bedeuten.
MS Techwiese
Microsoft
SecScore ●●●○○ 23.10. 20:12
Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations.
The post Inside the LiteLLM 1.107.0 supply chain…
Microsoft Security
Microsoft
SecScore ●●●○○ 23.10. 08:21
Was hat sich in der vergangenen Woche für Developer und IT-Pros getan? Was waren die wichtigsten Ankündigungen? Gab es neue Lernressourcen? Unser TechWiese-Team hat jede Menge Links für dich zusammengestellt.
MS Techwiese
Breach
SecScore ●○○○○ 22.10. 19:15
Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.
The post EMudhra Intermediate CA Certificates Compromised appeared fir…
Unit 42
Microsoft
SecScore ●●●○○ 22.10. 08:39
Mit Sovereign Control Panel, externem Schlüsselmanagement und Foundry Local auf Azure Local legst du die Kontrolle für jeden Workload einzeln fest.
MS Techwiese
APT
SecScore ●●●●● 21.10. 20:23
Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments.
The post AI-driven, large-scale nation-state campaign using …
Microsoft Security
Threat Intel
SecScore ●●○○○ 21.10. 17:10
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, inc…
Talos Intelligence
APT
SecScore ●●●○○ 21.10. 16:00
An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration.
The post “Next Exploit Opportunities”: How a Threat Actor Used AI to Help…
Unit 42
CVE
SecScore ●○○○○ 21.10. 14:00
Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).
NCSC UK
Microsoft
SecScore ●●●○○ 21.10. 08:21
Zwei kostenlose Tage Hands-on mit Azure am 10. und 11. November 2026 in München: Wähle dein Szenario von Sovereign Cloud über SQL & AI bis Kubernetes und sichere dir jetzt deinen Platz.
MS Techwiese
CVE
SecScore ●●●●○ 20.10. 22:30
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.
The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated Octob…
Unit 42
CVE
SecScore ●●●●○ 20.10. 17:31
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where…
Talos Intelligence
Microsoft
SecScore ●○○○○ 20.10. 11:24
Bei KI reicht es nicht mehr zu wissen, wo die Daten liegen. Wir zeigen, welche Fragen Developer, IT-Pros und Führungskräfte jetzt stellen sollten.
MS Techwiese
Microsoft
SecScore ●●●●○ 20.10. 08:39
Mit Project Tessera legt Microsoft Spezifikationen, Protokolle, Treiber und Firmware seines Integrated HSM offen und schafft eine Basis für quantenresistentes Schlüsselmanagement.
MS Techwiese
APT
SecScore ●●●●● 19.10. 15:00
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously.
The post Agents are your newest insiders. Security must move at their speed. appeared…
Microsoft Security
Breach
SecScore ●●●○○ 16.10. 19:47
Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing
The post Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2…
Unit 42
Microsoft
SecScore ●●●○○ 16.10. 18:00
New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls.
The post Managing open-weight model risk in enterprise deployments appeared…
Microsoft Security
Microsoft
SecScore ●●●○○ 16.10. 08:36
Was hat sich in der vergangenen Woche für Developer und IT-Pros getan? Was waren die wichtigsten Ankündigungen? Gab es neue Lernressourcen? Unser TechWiese-Team hat jede Menge Links für dich zusammengestellt.
MS Techwiese
Microsoft
SecScore ●●○○○ 16.10. 08:32
Im LinkedIn-Livestream am 22. Oktober 2026 zeigen Satya Nadella sowie Gäste von Bayer und TK Elevator, wie Unternehmen ihre KI-Strategie in messbare Ergebnisse umsetzen.
MS Techwiese
APT
SecScore ●●○○○ 16.10. 00:00
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft.
The post AI-Powered Espionage Campaign Targets Government Linux Inf…
Unit 42
Threat Intel
SecScore ●●●○○ 15.10. 20:00
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
Talos Intelligence
Microsoft
SecScore ●●○○○ 15.10. 08:00
Am 22. Oktober 2026 kommt die Microsoft Frontier Tour nach Köln. Im Sessionkatalog stehen 80 Programmpunkte. Wir haben zehn Sessions ausgewählt, die besonders interessant sein könnten.
MS Techwiese
CVE
SecScore ●●●○○ 15.10. 00:00
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant a…
Unit 42
Phishing
SecScore ●●●○○ 14.10. 15:00
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastru…
Microsoft Security
Microsoft
SecScore ●●○○○ 14.10. 08:00
Mit Microsoft Execution Containers (MXC) legst du per Policy fest, auf welche Dateien, Netzwerke und Oberflächen KI-Agenten und dynamisch generierter Code zugreifen dürfen.
MS Techwiese
Microsoft
SecScore ●●●○○ 14.10. 01:24
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was alr…
Krebs on Security
CVE
SecScore ●●●○○ 13.10. 22:37
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."
Talos Intelligence
Microsoft
SecScore ●●●○○ 13.10. 18:15
Explore how Microsoft is advancing hardware security through open-source Integrated HSM technology, collaboration, and cryptographic key protection.
The post Advancing hardware security with open-source Integrated HSM t…
Azure Security Blog
Breach
SecScore ●●○○○ 13.10. 12:47
I remember the name of that AI doco now - The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opin…
Troy Hunt
Microsoft
SecScore ●●●○○ 12.10. 09:39
Ein neuer Assistent im Azure Portal richtet Disaster Recovery für Azure-Local-Cluster ein, jetzt auch mit WDAC im Enforce-Modus und integrierter Proxy-Konfiguration.
MS Techwiese
Microsoft
SecScore ●●●○○ 09.10. 10:20
Was hat sich in der vergangenen Woche für Developer und IT-Pros getan? Was waren die wichtigsten Ankündigungen? Gab es neue Lernressourcen? Unser TechWiese-Team hat jede Menge Links für dich zusammengestellt.
MS Techwiese
Microsoft
SecScore ●●○○○ 07.10. 08:30
SQL Server läuft jetzt offiziell auf Azure Local in eigenen Rechenzentren und an Edge-Standorten, wahlweise mit Anbindung an Azure oder komplett offline.
MS Techwiese
Breach
SecScore ●●●○○ 07.10. 07:42
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers …
HaveIBeenPwned
Malware
SecScore ●○○○○ 06.10. 12:00
Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure.
The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appea…
Unit 42
Microsoft
SecScore ●●●○○ 02.10. 07:54
Was hat sich in der vergangenen Woche für Developer und IT-Pros getan? Was waren die wichtigsten Ankündigungen? Gab es neue Lernressourcen? Unser TechWiese-Team hat jede Menge Links für dich zusammengestellt.
MS Techwiese
Microsoft
SecScore ●●○○○ 01.10. 08:00
Workload Orchestration für Azure Arc ist ab sofort direkt im Azure Portal verfügbar und erleichtert die Bereitstellung verteilter Anwendungen.
MS Techwiese
CVE
SecScore ●●●○○ 30.09. 22:00
Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild.
The post Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-20…
Unit 42
Advisory
SecScore ●○○○○ 28.09. 14:00
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
NCSC UK
Threat Intel
SecScore ●○○○○ 26.09. 01:00
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses.
The post 3 Consulting Myths Debunked by Unit 42 Experts ap…
Unit 42
Microsoft
SecScore ●●●○○ 25.09. 09:22
Was hat sich in der vergangenen Woche für Developer und IT-Pros getan? Was waren die wichtigsten Ankündigungen? Gab es neue Lernressourcen? Unser TechWiese-Team hat jede Menge Links für dich zusammengestellt.
MS Techwiese
Microsoft
SecScore ●●○○○ 24.09. 08:00
Neue Management-Tools, KI-Funktionen und Platform-Level-Features bei Azure IaaS ermöglichen eine kontinuierliche Resilienzbewertung und minimieren die Auswirkungen von Infrastrukturstörungen.
MS Techwiese
Microsoft
SecScore ●●○○○ 23.09. 08:00
Strategie trifft Praxis: Die Microsoft Frontier Tour am 22. Oktober in Köln zeigt, wie Unternehmen KI-Initiativen von der Architektur und Absicherung bis zur produktiven Umsetzung voranbringen können.
MS Techwiese
CVE
SecScore ●●●●● 21.09. 09:00
This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for CVE-2026-50343, a bug dubbed …
Project Zero
Microsoft
SecScore ●●●●● 21.09. 08:00
Erfahre in dieser kostenlosen Online-Session, wie du deine Plattform mit Azure Copilot und GitHub Copilot auf eine KI-bereite Basis umstellst.
MS Techwiese
Microsoft
SecScore ●○○○○ 18.09. 09:25
Was hat sich in der vergangenen Woche für Developer und IT-Pros getan? Was waren die wichtigsten Ankündigungen? Gab es neue Lernressourcen? Unser TechWiese-Team hat jede Menge Links für dich zusammengestellt.
MS Techwiese
Malware
SecScore ●○○○○ 15.09. 14:00
Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.
NCSC UK
Breach
SecScore ●●○○○ 11.09. 22:37
I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the news would have you believe. There's the stat I ta…
Troy Hunt
Microsoft
SecScore ●●●○○ 10.09. 19:00
This blog post is the fourth and final installment of The Economics of Agent Optimization, which shares the strategies, capabilities, and proof points that can help you optimize agent costs and run AI as a managed inves…
Azure Security Blog
Microsoft
SecScore ●●●○○ 08.09. 23:44
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping…
Krebs on Security
Breach
SecScore ●●○○○ 25.08. 23:51
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even be the cybercrime guys who got this wrong, but it all …
Troy Hunt
Ransomware
SecScore ●○○○○ 18.08. 05:44
The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn't even involve "ware", it's just extortion) is carried out by kids who successfully make a …
Troy Hunt
Breach
SecScore ●●○○○ 30.07. 15:36
DoublePulsar
APT
SecScore ●○○○○ 23.07. 14:00
GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign
NCSC UK
CVE
SecScore ●●●●● 14.07. 20:10
BSI
Advisory
SecScore ●●○○○ 13.07. 14:00
New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers
NCSC UK
Microsoft
SecScore ●●●○○ 08.06. 17:37
Assistive AI agents aren't always helpful—it all depends on who they're working on behalf of.
Red Canary
Microsoft
SecScore ●●●○○ 02.06. 18:59
Microsoft Build 2026 highlights advancements in app development with Microsoft Fabric and Microsoft Databases, emphasizing a unified data and AI platform for scalable, agentic applications.
The post Microsoft Build 2026…
Azure Security Blog
Microsoft
SecScore ●●●●● 01.06. 15:04
Entra ID agent users can send malicious content to human users via Microsoft Teams. Here’s what to look out for.
Red Canary
CVE
SecScore ●●●○○ 28.05. 15:44
DoublePulsar
Research
SecScore ●●○○○ 13.05. 09:00
We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all…
Project Zero
CVE
SecScore ●●●●● 11.05. 16:05
The EtherRAT malware family was first reported by Sysdig back in December 2025. At that time, the initial access vector was exploitation of CVE-2025-55182 (React2Shell) targeting Linux servers. In March 2026, a Windows …
The DFIR Report
Microsoft
SecScore ●●●○○ 04.05. 18:00
Security for cloud infrastructure is no longer defined by a single control, product, or boundary. Modern threats target identity, software supply chains, control planes, networks, and data simultaneously.
The post Azure…
Azure Security Blog
Microsoft
SecScore ●●●○○ 30.04. 20:00
As cloud workloads become more agentic and AI systems handle increasingly sensitive data, trust must be engineered directly into infrastructure. Azure Integrated HSM brings hardware‑enforced key protection into Azure, e…
Azure Security Blog
APT
SecScore ●●●○○ 23.04. 17:50
DoublePulsar
Advisory
SecScore ●○○○○ 23.04. 14:00
New advisory highlights how to defend against attacker tactics believed to be used by China-linked actors to hide malicious cyber activity.
NCSC UK
Microsoft
SecScore ●●●●○ 15.04. 12:40
BSI
APT
SecScore ●●●○○ 07.04. 14:00
New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.
NCSC UK
Microsoft
SecScore ●●●○○ 01.04. 18:00
Azure IaaS provides foundational capabilities across compute, storage, and networking to help organizations stay resilient.
The post Azure IaaS: Keep critical applications running with built-in resiliency at scale appea…
Azure Security Blog
Microsoft
SecScore ●●●●○ 25.03. 12:10
BSI
Microsoft
SecScore ●●●●○ 04.03. 18:00
As organizations accelerate digital transformation, infrastructure decisions increasingly shape how quickly teams can adopt AI, how reliably applications operate at global scale, and how effectively businesses respond t…
Azure Security Blog
Ransomware
SecScore ●●●○○ 23.02. 15:09
Key Takeaways An audio version of this report can be found on Spotify, Apple, YouTube, Audible, & Amazon.  This intrusion began in mid-February 2024 after a threat actor exploited a vul…
The DFIR Report
Microsoft
SecScore ●●●○○ 17.02. 17:00
Modern cloud systems are expected to deliver more than uptime. Customers expect consistent performance, the ability to withstand disruption, and confidence that recovery is predictable and intentional.
The post Azure re…
Azure Security Blog
CVE
SecScore ●●●○○ 13.02. 11:25
BSI
Microsoft
SecScore ●●○○○ 12.02. 09:00
In my last blog post I introduced the new Windows feature, Administrator Protection and how it aimed to create a secure boundary for UAC where one didn’t exist. I described one of the ways I was able to bypass the featu…
Project Zero
CVE
SecScore ●●●○○ 30.01. 09:00
In the first part of this series, I detailed my journey into macOS security research, which led to the discovery of a type confusion vulnerability (CVE-2024-54529) and a double-free vulnerability (CVE-2025-31235) in the…
Project Zero
Microsoft
SecScore ●●○○○ 26.01. 09:00
A headline feature introduced in the latest release of Windows 11, 25H2 is Administrator Protection. The goal of this feature is to replace User Account Control (UAC) with a more robust and importantly, securable system…
Project Zero
Ransomware
SecScore ●○○○○ 21.11. 00:55
DoublePulsar
APT
SecScore ●●●○○ 05.11. 08:00
We continue to adapt our sovereignty approach—innovating to meet customer needs and regulatory requirements within our Sovereign Public Cloud and Sovereign Private Cloud. We are announcing a new wave of capabilities, bu…
Azure Security Blog
Microsoft
SecScore ●●●○○ 28.10. 11:20
BSI
Microsoft
SecScore ●●●○○ 27.10. 12:10
BSI
Ransomware
SecScore ●●●●○ 05.08. 23:30
Overview Bumblebee malware has been an initial access tool used by threat actors since late 2021. In 2023 the malware was first reported as using SEO poisoning as a delivery mechanism. Recently in May of 2025 Cyjax repo…
The DFIR Report