Monthly Archives: April 2020


Advertising

Workaround for Surface Pro 7 shutdown bug?

[German]There may be a workaround for owners of a Surface Pro 7 that can prevent the Microsoft tablet from spontaneously shutting down. Here are some hints about the problem and suggested workarounds. Advertising

Posted in devices, issue | Tagged , | Leave a comment

Backdoor: NSA and ASD warn of vulnerabilities

[German]The US secret service NSA and the Australian secret service have issued a joint warning. Hackers are increasingly trying to exploit unpatched vulnerabilities in products to infiltrate systems via web shell malware. Advertising

Posted in Security, Software | Tagged , | Leave a comment

PoC for Windows 10 Vulnerability CVE-2020-0624

[German]On patchday, January 14, 2020, Microsoft has closed the vulnerability CVE-2020-0624 (Win32k Elevation of Privilege) with security updates. Now I have found a Proof of Concept (PoC). Advertising

Posted in Security, Windows | Tagged , , , | Leave a comment

Security: Data leaks, Malware, Vulnerabilities (04/24)

[German]Today again an overview of security issues in IT. It's about a data leak at a startup that does payment processing, about weaknesses in smart home and compromised apps up to a hacked ad server. Advertising

Posted in Security | Tagged | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Cisco AnyConnect Secure Mobility Client Vulnerability CVE-2020-3153

[German]The Windows version of Cisco AnyConnect Secure Mobility client has a vulnerability in it's auto update, that can be misused for privilege escalation. A patch is available. Advertising

Posted in Security, Software, Update, Windows | Tagged , , | Leave a comment

Advertising

0-day Exploits in iOS Mail

[German]Security researchers have found two 0-day exploits in virtually all iOS versions (iOS 6 through 13) that allow remote code execution (RCE) via mail. The vulnerabilities are likely to be actively exploited. Advertising

Posted in Security | Tagged , | Leave a comment

Windows 10 V2004 (Build 19041.208 in Insider Slow Ring)

[German]As of April 22, 2020, Microsoft has released a cumulative update (KB4558244) for the Windows 10 version 2004 for insiders in the slow ring. This update raises the build to 19041.208. It fixes an issue that prevents NPLogonNotify API notifications … Continue reading

Posted in Update, Windows | Tagged , | Leave a comment

Advertising

0patch fixes CVE-2020-0687 in Windows 7/Server 2008 R2

[German]ACROS Security has released a micropatch for the memory corruption vulnerability CVE-2020-0687 in TTF fonts for Windows 7 and Server 2008 R2 (without ESU). Advertising

Posted in Security, Windows | Tagged , , , , | Leave a comment

Windows 10 Insider Preview Build 19613 (Fast Ring)

[English]On April 22, 2020, Microsoft released the Windows 10 Insider Preview Build 19613.1000 (20H2 development branch) for insiders in the Fast Ring. Microsoft describes in the Windows Blog the new features, bug fixes and known issues of this build. Advertising

Posted in Windows | Tagged , | Leave a comment

Four 0-day Exploits in IBM Data Risk Manager

[German]Security researchers have just revealed four unpatched vulnerabilities in IBM Data Risk Manager. The vulnerabilities were reported to IBM, but IBM rejected the report due to lack of formal requirements. Three vulnerabilities are considered critical. Advertising

Posted in Security, Software | Tagged , | Leave a comment