IT-Wissen.
Direkt aus der Praxis.

🔒

Security & Hacking

AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud

Cybersecurity researchers have unmasked a novel ad fraud scheme that has been found to leverage search engine poisoning (SEO) techniques and artificial intelligence (AI)-generated content to push dece...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with campaigns reaching more than 220,000 accounts on Facebook, Instagram, Mes...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)

OX Security recently analyzed 216 million security findings across 250 organizations over a 90-day period. The primary takeaway: while raw alert volume grew by 52% year-over-year, prioritized cri...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users

Cybersecurity researchers have discovered a new campaign in which a cluster of 108 Google Chrome extensions has been found to communicate with the same command-and-control (C2) infrastructure with the...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

Thursday. Another week, another batch of things that probably should've been caught sooner but weren't. This one's got some range — old vulnerabilities getting new life, a few "why was that ...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

The Hidden Security Risks of Shadow AI in Enterprises

As AI tools become more accessible, employees are adopting them without formal approval from IT and security teams. While these tools may boost productivity, automate tasks, or fill gaps in ...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

Threat actors have been exploiting a previously unknown zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December 2025. The finding, detailed by EXPMO...

FM

Auto-Blog

14.04.2026

🔒

Security & Hacking

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

Unknown threat actors have hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla to push a poisoned version containing a backdoor. The incident impacts Smart Slider 3 P...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installs

Details have emerged about a now-patched security vulnerability in a widely used third-party Android software development kit (SDK) called EngageLab SDK that could have put millions of ...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations (NGOs) and suspected universities to d...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

The North Korean hacking group tracked as APT37 (aka ScarCruft) has been attributed to a fresh multi-stage, social engineering campaign in which threat actors approached targets on Facebook and a...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but noted that no user data or internal system was compromised. "O...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

A critical security vulnerability in Marimo, an open-source Python notebook for data science and analysis, has been exploited within 10 hours of public disclosure, according to findings from...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Monday is back, and the weekend’s backlog of chaos is officially hitting the fan. We are tracking a critical zero-day that has been quietly living in your PDFs for months, plus some aggressi...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

Your MTTD Looks Great. Your Post-Alert Gap Doesn't

Anthropic restricted its Mythos Preview model last week after it autonomously found and exploited zero-day vulnerabilities in every major operating system and browser. Palo Alto Networks' Wendi&n...

FM

Auto-Blog

13.04.2026

🔒

Security & Hacking

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

Cybersecurity researchers have flagged yet another evolution of the ongoing GlassWorm campaign, which employs a new Zig dropper that's designed to stealthily infect all integrated development env...

FM

Auto-Blog

12.04.2026

🔒

Security & Hacking

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

While much of the discussion on AI security centers around protecting ‘shadow’ AI and GenAI consumption, there's a wide-open window nobody's guarding: AI browser extensions.  A&nbs...

FM

Auto-Blog

12.04.2026

🔒

Security & Hacking

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began testing the security feature in op...

FM

Auto-Blog

12.04.2026

🔒

Security & Hacking

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads Quelle: The Hacker News Zusammenfassung Unknown threat actors compromised CPUID (...

FM

Auto-Blog

12.04.2026

🔒

Security & Hacking

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Quelle: The Hacker News Zusammenfassung Adobe has released emergency updates to fix a criti...

FM

Auto-Blog

12.04.2026

🔒

Security & Hacking

Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data

Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data Quelle: The Hacker News Zusammenfassung Hungarian domestic intelligence, the...

FM

Auto-Blog

12.04.2026

📰

Tipps fuer KMU

IT-Budget 2025: So planen kleine Unternehmen ihre IT-Ausgaben richtig

IT-Budget 2025: So planen kleine Unternehmen ihre IT-Ausgaben richtig Autor: Faheem Maqbool, IT-Architekt | Veroeffentlicht: April 2025 | Lesezeit: 9 Minut...

FM

Faheem Maqbool

08.04.2026

🤖

KI & AI Studien

KI-gestuetzter Penetrationstest: 99,9% Erkennungsrate

KI-gestuetzter Penetrationstest: 99,9% Erkennungsrate Autor: Faheem Maqbool, IT-Architekt | Veroeffentlicht: April 2025 | Lesezeit: 8 Minuten Klassische P...

FM

Faheem Maqbool

08.04.2026

☁️

Cloud & Migration

Cloud Migration 2025: Von On-Premise zu Azure und Google Cloud

Cloud Migration 2025: Von On-Premise zu Azure und Google Cloud Autor: Faheem Maqbool, IT-Architekt | Veroeffentlicht: April 2025 | Lesezeit: 10 Minuten Di...

FM

Faheem Maqbool

08.04.2026

🔒

Security & Hacking

Zero Trust Architektur: Der komplette Leitfaden fuer den Mittelstand

Zero Trust Architektur: Der komplette Leitfaden fuer den Mittelstand Autor: Faheem Maqbool, IT-Architekt | Veroeffentlicht: April 2025 | Lesezeit: 9 Minute...

FM

Faheem Maqbool

08.04.2026

🔒

Security & Hacking

Ransomware 2025: Warum deutsche Unternehmen jetzt handeln muessen

Ransomware 2025: Warum deutsche Unternehmen jetzt handeln muessen Autor: Faheem Maqbool, IT-Architekt | Veroeffentlicht: April 2025 | Lesezeit: 8 Minuten...

FM

Faheem Maqbool

08.04.2026