===================== = End-of-Day report = =====================
Timeframe: Mittwoch 21-10-2026 18:00 − Donnerstag 22-10-2026 18:00 Handler: Katharina Siess Co-Handler: Guenes Holler
===================== = News = =====================
∗∗∗ LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor ∗∗∗ --------------------------------------------- The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. --------------------------------------------- https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html
∗∗∗ Fortinet Releases Security Hardening Release for Multiple Products ∗∗∗ --------------------------------------------- On October 22, 2026, Fortinet will release a coordinated set of security updates for FortiOS, FortiManager, and FortiAnalyzer following recent releases from FortiMail and FortiAuthenticator. We strongly urge every customer to plan and promptly complete these upgrades as soon as the releases are available, prioritizing internet-facing devices. --------------------------------------------- https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-har...
∗∗∗ New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification ∗∗∗ --------------------------------------------- A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. --------------------------------------------- https://thehackernews.com/2026/10/new-qpack-flaws-can-crash-http3-servers.ht...
∗∗∗ Fake-Shops und verbilligte Storno-Geräte: Mediamarkt als Köder für mehrere Betrugsmaschen ∗∗∗ --------------------------------------------- Mediamarkt zählt hierzulande zu den absoluten Branchenriesen im Bereich Multimedia und Elektronik. Ein Status, den sich aktuell vermehrt Kriminelle zu Nutze machen wollen. Sie bauen nicht nur Mediamarkt-Fakeshops, sondern versenden außerdem noch Angebote zu angeblich verbilligte Stornoware an Unternehmen. In beiden Fällen ist das Auslösen einer Überweisung das Ziel. --------------------------------------------- https://www.watchlist-internet.at/news/fake-shops-stornoggeraete-mediamarkt/
===================== = Vulnerabilities = =====================
∗∗∗ Kritische Codeausführung: GitLab veröffentlicht dringende Sicherheitsupdates ∗∗∗ --------------------------------------------- Mit Updates für mehrere Versionszweige schließt GitLab zwölf Sicherheitslücken, darunter auch eine kritische Lücke zur Remote-Codeausführung. --------------------------------------------- https://www.heise.de/news/GitLab-schliesst-kritische-Sicherheitsluecke-und-e...
∗∗∗ Passwortmanager ohne Cloud-Zwang: Update für KeePassXC ∗∗∗ --------------------------------------------- KeePassXC 2.8.0 schließt Sicherheitslücken, unterstützt Auto-Type unter Wayland und ermöglicht den Datenbankabgleich über externe Programme. --------------------------------------------- https://www.heise.de/news/Passwortmanager-ohne-Cloud-Zwang-Update-fuer-KeePa...
∗∗∗ CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers ∗∗∗ --------------------------------------------- The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...] CISA has directed federal agencies to prioritize patching systems affected by Plex2Shell vulnerabilities or apply mitigations by October 23. --------------------------------------------- https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws...
∗∗∗ Cisco Expressway Series Security Hardening Release: October 2026 ∗∗∗ --------------------------------------------- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisor...
∗∗∗ Multiple Cisco Products Snort 3 Denial of Service Vulnerability ∗∗∗ --------------------------------------------- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisor...
∗∗∗ Drupal: Critical and moderately critical security advisories announced ∗∗∗ --------------------------------------------- https://www.drupal.org/security
∗∗∗ TYPO3-PSA-2026-001: Critical PHP security release: PHP update required for all TYPO3 installations ∗∗∗ --------------------------------------------- https://news.typo3.com/article/typo3-psa-2026-001
∗∗∗ SVD-2026-1010: Security Vulnerabilities in Splunk SOAR - October 2026 ∗∗∗ --------------------------------------------- https://advisory.splunk.com/advisories/SVD-2026-1010
∗∗∗ LWN Security updates for Thursday ∗∗∗ --------------------------------------------- https://lwn.net/Articles/1102265/