IBM QRadar SIEM: Schwachstellen in Komponenten von Drittanbietern geschlossen
Heise Security 26.05.2026 14:24
Unter anderem nun geschlossene Sicherheitslücken im Linux-Kernel gefährden IBM QRadar SIEM.
DoS- und Schadcode-Attacken auf NGINX-Webserver vorstellbar
Heise Security 26.05.2026 12:00
In aktuellen Versionen von NGINX Open Source und NGINX Plus haben die Entwickler eine Sicherheitslücke geschlossen.
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
The Hacker News 26.05.2026 11:49
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met.
The vulnerability, tracked as CVE-2026-45659, carries a CVSS score of 8.8. It has been assigned an important severity.
"Deserialization of untrusted data in Microsoft Office SharePoint allows
Jetzt patchen! Angreifer nutzen kritische Schadcode-Lücke in Drupal aus
Heise Security 26.05.2026 08:16
Angreifer haben es derzeit auf mit dem CMS Drupal erstellte Websites abgesehen. Seiten sind aber nur verwundbar, wenn sie PostgreSQL nutzen.
Vulnerabilities have become cyber attackers’ No. 1 door to the enterprise
CSO Online 26.05.2026 07:00
Patching practices are coming under intense pressure of late, as time-to-exploit windows accelerate — a new reality likely to worsen as AI assistance in attack chains rises.
Now cyber defenders have another cause for flaw alarm: Vulnerability exploitation has significantly pulled away from stolen credentials as the most common entry point in security breaches, according to the latest edition of Verizon’s annual Data Breach Investigations Report (DBIR).