On December 31, 2020 I discovered the cause of the problem: there was a 2nd administrator visible at the bottom of the control panel. I activated Google's 2-step-authentication in Joomla and installed Google Authentication on my mobile. Then I shutdown/restart the website that appeared to have the security issue. I opened the K2 articles tab to do a filter test. It works normal again.