Nachrichtenarchiv

The Hacker News 02.03.2026 17:08
Cybersecurity researchers have disclosed details of a now-patched security flaw in Google Chrome that could have permitted attackers to escalate privileges and gain access to local files on the system.
The vulnerability, tracked as CVE-2026-0628 (CVSS score: 8.8), has been described as a case of insufficient policy enforcement in the WebView tag. It was patched by Google in early January 2026

Infosecurity Magazine 02.03.2026 16:15
Google Chrome initiates quantum-resistant measures via Merkle Tree Certificates to secure HTTPS

Heise Security 02.03.2026 14:28
6G-Funk soll nicht nur Daten übertragen, sondern die Umgebung aktiv ausleuchten. ETSI warnt vor Gefahren für Sicherheit und Privatsphäre durch dieses „Sensing“.

Infosecurity Magazine 02.03.2026 10:45
Chainalysis reveals a big surge in median ransomware payment size in 2025 despite overall drop in criminal revenue

Heise Security 02.03.2026 08:47
Wichtige Sicherheitsupdates schließen mehrere Lücken IBM QRadar SIEM. Eine Schwachstelle gilt als kritisch.

Heise Security 02.03.2026 07:02
Die Entwickler haben aktualisierte Checkmk-Versionen herausgegeben. Sie schließen eine mindestens hochriskante Cross-Site-Scripting-Lücke.

Krebs Security 28.02.2026 12:01
In early January 2026, KrebsOnSecurity revealed how a security researcher disclosed a vulnerability that was used to assemble Kimwolf, the world's largest and most disruptive botnet. Since then, the person in control of Kimwolf — who goes by the handle "Dort" — has coordinated a barrage of distributed denial-of-service (DDoS), doxing and email flooding attacks against the researcher and this author, and more recently caused a SWAT team to be sent to the researcher's home. This post examines what is knowable about Dort based on public information.

We Live Security 28.02.2026 10:00
In this roundup, Tony looks at how opportunistic threat actors are taking advantage of weak authentication, unmanaged exposure, and popular AI tools

The Hacker News 28.02.2026 09:56
New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensitive Gemini endpoints and access private data.
The findings come from Truffle Security, which discovered nearly 3,000 Google API keys (identified by the prefix "AIza") embedded in client-side code to provide Google-related services like