Category Archives: Security

Interpol shuts down 22,000 IP addresses

Posted on 2024-11-07 by guenni

[German]Law enforcement agencies around Interpol have shut down a total of 22,000 devices using IP addresses associated with cybercrime in a joint operation. Operation Synergia II (April 1 – August 31, 2024) specifically targeted phishing, ransomware and information theft sites … Continue reading →

Posted in Security | Tagged | 1 Comment
Advertising

Microsoft: Attacks on cloud customers by stealing login data

Posted on 2024-11-05 by guenni

[German]Microsoft security experts have observed various intrusion activities aimed at stealing the credentials of several Microsoft customers. These attacks by suspected state actors (China-Russia) were probably successful and were made possible by password spray attacks or via RDP. Advertising

Posted in Cloud, Security | Tagged , | Leave a comment

Google uncovers vulnerability in SQLite with AI

Posted on 2024-11-03 by guenni

[German]They do exist, useful examples of AI applications. The Project Zero team has now explained how it unleashed a Large Language Model (LLM) on software for vulnerability analysis in the "Big Sleep" project (the successor to "Naptime"). This uncovered a … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Valetudo: Taming spying automatic robot vacuum cleaner

Posted on 2024-11-03 by guenni

[German]Automatic robot vacuum cleaners are now in many households. The devices are collecting many data and can spying on a user environment. How can the owner of such an appliance prevent data from flowing into the manufacturer's cloud? I have … Continue reading →

Posted in devices, Security | Tagged , | Leave a comment

Okta has closed a login vulnerability that allowed an arbitrary password

Posted on 2024-11-02 by guenni

[German]Does anyone from my readers use the Okta authentication service? Once again there is a security report about this provider. Okta has just closed a login vulnerability that allowed users to log in to certain accounts with any password since … Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Microsoft wants 30 US-$ for 1 year Windows 10 consumer support extension

Posted on 2024-11-01 by guenni

[German]In one year, the Windows 10 operating system will no longer be supported. Companies can apply for a support extension (ESU). Microsoft has now commented on the end of support for Windows 10, is promoting the switch to Windows 11 … Continue reading →

Posted in Security, Update, Windows | Tagged , , | 1 Comment
Advertising

Operation Magnus: Law enforcement officials have seized the infrastructure of Infostealer Redline and Meta

Posted on 2024-10-29 by guenni

[German]International law enforcement agencies from the Netherlands, the United States, Belgium, Portugal, the United Kingdom and Australia have shut down three servers in the Netherlands and seized two domains linked to the infostealers Redline and Meta as part of Operation … Continue reading →

Posted in Security | Tagged | Leave a comment

Exchange Online: Inbound SMTP DANE with DNSSEC available

Posted on 2024-10-29 by guenni

[German]Microsoft has generally released Inbound SMTP DANE with DNSSEC for Exchange Online, after it was already available as a preview in July 2024. The new Inbound SMTP DANE with DNSSEC function in Exchange Online is intended to increase the security … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment
Advertising

Windows: Driver signature bypass enables rootkit installation

Posted on 2024-10-28 by guenni

[German]Old topic new revisited. Attackers can downgrade Windows kernel components and thus bypass the protection of the operating system through functions such as Driver Signature Enforcement. This allows rootkits to be used on fully patched systems. SafeBreach security researcher Alon … Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Microsoft Azure requires MFA since October 15, 2024 – postponement possible

Posted on 2024-10-24 by guenni

[German]Microsoft wants administrators to use multi-factor authentication (MFA) to log in to Azure from October 15, 2024, although a delay of up to 5 months is possible. Advertising

Posted in Cloud, Security | Tagged , | 1 Comment