🎙️ Cyberwald - Cybersecurity-News - 04.06.2026

Heute im Podcast:
• VS Code Zero-Day: GitHub-OAuth-Token-Diebstahl mit einem Klick
• HTTP/2 Bomb: Neuer DoS-Angriff legt alle großen Webserver lahm
• Microsoft 365 Android: Debug-Flag erlaubt Account-Token-Diebstahl
• CISA warnt: Aktive Angriffe auf Linux/Android und Treibstoff-Tankanlagen
• Google Gemini: Benachrichtigungen kapern Sprachassistenten auf Android

🔗 Podcast anhören: https://www.cyberwald.com/podcast.ogg

#Cybersecurity #Podcast #Cyberwald #SecurityNews #ITSecurity

ビジュアルアーツ、クラウドストレージ認証情報の窃取で最大約1万3,000件超の個人情報漏洩の恐れ-未発売ゲーム「anemoi」の海外流出、マイナンバー・従業員の本人確認書類画像も漏洩か

https://rocket-boys.co.jp/security-measures-lab/visual-arts-cloud-storage-credential-theft-leak/

#セキュリティ対策Lab #security #securitynews #cyberattack #incident
#databreach

Ivanti Neurons for ITSMに管理者権限取得の脆弱性 CVE-2026-9614

https://rocket-boys.co.jp/security-measures-lab/ivanti-neurons-itsm-admin-privilege-vulnerability-cve-2026-9614/

#セキュリティ対策Lab #security #securitynews

Rancher Kubernetesプラットフォームに3件の重大な脆弱性(CVE-2026-44939,CVE-2026-41052,CVE-2026-41053)

https://rocket-boys.co.jp/security-measures-lab/rancher-platform-flaws-cve-2026-44939-cve-2026-41052/

#セキュリティ対策Lab #security #securitynews

Palo Alto Networks PAN-OSの脆弱性が公開4日後にサイバー攻撃に悪用(CVE-2026-0257)

https://rocket-boys.co.jp/security-measures-lab/pan-os-vulnerability-cve-2026-0257-exploited/

#セキュリティ対策Lab #security #securitynews

【要警戒】ディスクユニオンとARBANのサイトでpolyfill[.]io経由の不審な認証画面が表示-北朝鮮による認証情報窃取キャンペーンか

https://rocket-boys.co.jp/security-measures-lab/disk-union-arban-polyfill-suspicious-authentication/

#セキュリティ対策Lab #security #securitynews
#cyberattack
#incident

Microsoftが自律型エージェント Scout(Autopilot)を発表ー3つのセキュリティ懸念
https://rocket-boys.co.jp/security-measures-lab/microsoft-unveils-autonomous-agent-scout-autopilot/

#セキュリティ対策Lab #security #securitynews
#ainews

阿波銀行 OAテスト環境への不正アクセスの原因が判明-頭取含む役員3名が報酬30%・1カ月自主返納
https://rocket-boys.co.jp/security-measures-lab/awa-bank-unauthorized-access-oa-test-environment/

#セキュリティ対策Lab #security #DataBreach #securitynews

CAMPFIREの不正アクセス、従業員がGitHubの認証情報を個人開発サーバーへアップし不正利用される
https://rocket-boys.co.jp/security-measures-lab/campfire-unauthorized-access-github-credentials/

#セキュリティ対策Lab #security #DataBreach #securitynews

🔒 Security News Digest - 2026-06-03

📊 13 updates from 7 sources:

🔹 Security News | TechCrunch: Ultrahuman says hackers accessed customers’ wellness data via internal tool
https://techcrunch.com/2026/06/03/ultrahuman-says-hackers-accessed-customers-wellness-data-via-internal-tool/

🔹 SecurityWeek: Coralogix Raises $200M at $1.6B Valuation to Scale AI Observability Platform
https://www.securityweek.com/coralogix-raises-200m-at-1-6b-valuation-to-scale-ai-observability-platform/

🦠 Malwarebytes: We found this fake-invoice campaign while scammers were still building it
https://www.malwarebytes.com/blog/threat-intel/2026/06/we-found-this-fake-invoice-campaign-while-scammers-were-still-building-it

🔹 darkreading: Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
https://www.darkreading.com/application-security/coding-gaffe-exposes-microsoft-365-accounts-takeover

🔹 The Record from Recorded Future News: DHS chief signals efforts to reshape CISA
https://therecord.media/dhs-chief-signals-efforts-to-reshape-cisa

🔹 BleepingComputer: New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
https://www.bleepingcomputer.com/news/security/new-http-2-bomb-dos-attack-crashes-web-servers-in-under-a-minute/

🔹 darkreading: Cyber Insurance Rates Are Dropping, but Exclusions Widen
https://www.darkreading.com/cyber-risk/cyber-insurance-rates-drop-exclusions-widen

🔹 The Hacker News: WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
https://thehackernews.com/2026/06/whatsapp-slack-notifications-could.html

🔹 darkreading: Tropical Blend: Cyber & Politics Ramp Up Across Latin America
https://www.darkreading.com/cyberattacks-data-breaches/nation-state-cyber-activity-latin-america

🔹 BleepingComputer: CISA warns of cyberattacks targeting fuel tank monitoring systems
https://www.bleepingcomputer.com/news/security/cisa-warns-of-cyberattacks-targeting-fuel-tank-monitoring-systems/

🔹 BleepingComputer: The U.S. sanctions Nobitex crypto exchange used by ransomware
https://www.bleepingcomputer.com/news/security/the-us-sanctions-nobitex-crypto-exchange-used-by-ransomware/

🔹 darkreading: Attackers Use AI to Automate EDR Evasion Testing
https://www.darkreading.com/endpoint-security/attackers-automate-edr-evasion-testing

🔹 BleepingComputer: Chinese hackers use new Atlas RAT malware in European cyberattacks
https://www.bleepingcomputer.com/news/security/chinese-hackers-use-new-atlas-rat-malware-in-european-cyberattacks/

#InfoSec #SecurityNews