Category Archives: Security

Varonis warns about Salesforce sites no longer in use

Posted on 2023-06-10 by guenni

[German]Varonis security researchers have discovered a problem associated with Salesforce sites that are orphaned and no longer in use. Varonis Threat Labs security researchers have discovered that improperly disabled Salesforce sites, known as ghost sites, continue to retrieve current data … Continue reading →

Posted in Security | Tagged | Leave a comment
Advertising

Facebook clickbait: Scammers use Google Cloud Run to trick users

Posted on 2023-06-09 by guenni

[German]Online criminals are constantly thinking of ways to trap victims via social media platforms. The main goal is to get users to click on malicious links. In doing so, they often lurk in the background and use sophisticated tactics to … Continue reading →

Posted in Security | Tagged | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

Barracuda says exchange your "Email Security Gateway Appliance (ESG)" immediately

Posted on 2023-06-09 by guenni

[German]Another short topic, which has been a bit delayed due to holidays. The manufacturer Barracuda is asking administrators of its Email Security Gateway Appliance (ESG) to replace the devices immediately. The background is a vulnerability in the ESG models, which … Continue reading →

Posted in issue, Security | Tagged | Leave a comment
Advertising

Gigabyte firmware update for motherboards closes vulnerability (June 2023)

Posted on 2023-06-07 by guenni

[German]Owners of a computer with a motherboard from the manufacturer Gigabyte can now update the board's firmware. The update provided by the manufacturer is supposed to eliminate a serious vulnerability. The vulnerability, which is present in about 260 motherboard models, … Continue reading →

Posted in Security, Update | Tagged , | Leave a comment

Firefox 114.0 and 102.12.0 esr released

Posted on 2023-06-07 by guenni

[German]Mozilla's developers have released the versions 114.0 and 102.12.0 ESR of the Firefox browser on June 6, 2023. The ESR versions are maintenance updates that are supposed to fix bugs. Firefox 114 is a new development branch. In both updates, … Continue reading →

Posted in browser, Security, Update | Tagged , | Leave a comment
Advertising

Google Chrome 114.0.5735.106/.110 closes 0-day

Posted on 2023-06-06 by guenni

[German]Google has released updates to Google Chrome browser 114 in the stable channel for Mac, Linux and Windows as of June 5, 2023 (thanks to the reader for pointing this out). They are security updates that fix a critical vulnerability … Continue reading →

Posted in browser, Security, Update | Tagged | Leave a comment

Trend Micro: Minimum Windows Requirements for ACS (Azure Code Signing)

Posted on 2023-06-06 by guenni

[German]Trend Micro released a document in late May 2023 that addresses the minimum Windows requirements for Azure Code Signing (ACS) for Worry-Free Business Security (on-premises) and Worry-Free Business Security Services (WFBS-SVC). Advertising

Posted in Security, Windows | Tagged , | 2 Comments

Lace Tempest/Clop ransomware gang exploits MOVEit vulnerability CVE-2023-34362

Posted on 2023-06-05 by guenni

[German]The SQL injection vulnerability CVE-2023-34362 in the Managed File Transfer (MFT) solution MOVEit has been known for a few days. This vulnerability has been exploited by attackers for some time and security authorities are now warning about the risks of … Continue reading →

Posted in Security | Tagged | Leave a comment
Advertising

Edge 114.0.1823.37

Posted on 2023-06-05 by guenni

Microsoft has updated the Edge browser in the stable channel on June 2, 2023 to version 114.0.1823.37 (security and bug fixes). According to the release notes, the vulnerabilities from the Chromium project as well as CVE-2023-29345 and CVE-2023-33143 are closed. … Continue reading →

Posted in browser, Security, Update, Windows | Tagged | Leave a comment

Splashtop Streamer v3.5.6.0 generates high CPU and IO load due to antivirus software

Posted on 2023-06-04 by guenni

A note for users of Splashtop Streamer software (is integrated into management tools like NinjaRMM) who wonder about high CPU and IO load on their machines. The cause could be the antivirus software in use, which wants to scan log … Continue reading →

Posted in issue, Security, Software, Windows | Tagged , , , | 1 Comment