Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Category Archives: devices
Vulnerabilities in MiCODUS GPS tracker MV720 allow to monitor and stop vehicles
[German]Security reasearchers have discovered six serious serioud vulnerabilities in the MV720 GPS trackers from MiCODUS, which are frequently used in vehicles. Security researchers have managed to hack the trackers so that the vehicles' location data could be monitored by third … Continue reading
ASUS/Gigabyte Mainboards: CosmicStrand Rootkit found in UEFI Firmware
[German]Security researchers from Kaspersky have tracked down a malware that was hidden in the UEFI firmware of various mainboards from ASUS and Gigabyte. The Chinese malware, CosmicStrand, is said to have been undetected in the UEFI of the affected motherboards … Continue reading
HP Pavilion Windows devices stutters (July 2022)
[German]I have come across reports of HP Pavilion 15 notebooks with Windows 10 suddenly stalling in operation. I'll summarize what I've had read – maybe there are people affected among the readers – otherwise as a hint to support engineers … Continue reading
Trouble with Lenovo BIOS update
[German]Users of Lenovo ThinkPads probably run into problems (booting, screen, etc.) due to BIOS or driver updates pushed onto the devices by Lenovo software. I'll summarize this as a hint to service providers who are confronted with the problem by … Continue reading
UEFI firmware bug compromises over 70 Lenovo notebooks (July 2022)
[German]Note for blog readers who use Lenovo (and IBM) notebooks. Security researchers from ESET have found serious vulnerabilities in the UEFI firmware of Lenovo notebooks that allow the operating system to be hijacked in the early boot phase. Lenovo has … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
QNAP warns of Checkmate ransomware attacks on its NAS (July 2022)
[German]Taiwanese manufacturer QNAP has issued a warning as of July 7, 2022 that a new Checkmate ransomware attacks its NAS units via SMB services accessible via the Internet. Presumably, weak passwords will then have their credentials cracked via brute-force attack … Continue reading
DeadBold- and eCh0raix ransomware attacks on QNAP NAS (June 2022)
[German]QNAP system owners are currently under fire from two ransomware groups. Once, cases of infections with the eCh0raix ransomware were detected. This is where drives are encrypted. In addition, QNAP has recently published a security notice that warns against attacks … Continue reading
Critical CVE-2022-20825 in Cisco small business routers will not be fixed
[German]A critical vulnerability CVE-2022-20825 exists in the RV110W, RV130, RV130W and RV215W small business routers, which has been assigned a CVE score of 9.8. Due to a lack of authentication, the vulnerability allows for remote command execution as well as … Continue reading
QTS 5.0.0 security updates for QNAP NAS devices (June 8, 2022)
[German]Short note to readers who have NAS drives from QNAP in use. There are serious vulnerabilities in the QTS 5.0.0 software in older versions, which were fixed on June 8, 2022 with an update of the firmware to QTS 5.0.0.2055 … Continue reading
Mass account taskeover via API possible with smart Yunmai scales
[German]Security researchers have had a closer look at smart scales offered by the Chinese manufacturer Yunmai. These smart scales can be coupled with an app on the smartphone via Bluetooth so that the personal data of several people may be … Continue reading