Heise Security News (alert)

• UniFi Gateways und Firewalls: Ubiquiti schließt DoS-Lücken (23.09.2026 11:53)
• Patchday: Adobe Connect ist unter Android, macOS und Windows verwundbar (23.09.2026 08:45)
• Cyberangriffe auf F5 BIG-IP, Check Point Security und Arista VeloCloud (23.09.2026 06:36)
• Gleich noch ein Sicherheitsupdate für WordPress (22.09.2026 18:29)
• Sicherheitsupdates: Click2Shell-Lücke zum Kompromittieren von WordPress-Websites (22.09.2026 07:52)
• Fremdzugriffe auf SolarWinds Access Rights Manager vorstellbar (21.09.2026 10:21)

CyberSecurityNews (The Hacker News)

• Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry (23.09.2026 18:06)
• A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You (23.09.2026 16:53)
• MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key (23.09.2026 16:06)
• This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move (23.09.2026 14:17)
• Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI (23.09.2026 13:52)
• New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control (23.09.2026 12:16)
• 545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent (23.09.2026 11:47)
• Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests (23.09.2026 11:47)
• Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape (23.09.2026 11:12)
• F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers (23.09.2026 08:29)
• Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware (23.09.2026 08:29)
• Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input (23.09.2026 07:04)