Category Archives: Security

Zyxel warns of critical security vulnerabilities in NAS devices

Posted on 2023-12-02 by guenni

[German]Does anyone operate a Zyxel NAS in their environment? The Taiwanese manufacturer has just warned of several vulnerabilities in the firmware of these devices. Three critical vulnerabilities allow an unauthenticated attacker to execute operating system commands on vulnerable network-attached storage … Continue reading →

Posted in devices, Security, Update | Tagged , , | Leave a comment
Advertising

iOS, macOS, Safari: Emergency updates close vulnerabilities

Posted on 2023-12-01 by guenni

[German]Apple released updates for iOS, macOS and Safai a few hours ago. These emergency updates are intended to close critical security vulnerabilities (CVE-2023-42916 & CVE-2023-42917) that are already under attack. These vulnerabilities can expose sensitive data while browsing. So it's … Continue reading →

Posted in browser, ios, Security, Update | Tagged , , , , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

Security risks from web cams; Hikvision cameras and NVR with security risk

Posted on 2023-12-01 by guenni

[German]Security cameras with vulnerabilities pose a risk to their owners. The same applies to webcams, which can often be taken over by attackers. Cameras and NVRs (Network Video Recorder) from the manufacturer Hikvision have vulnerabilities that can be exploited by … Continue reading →

Posted in devices, Security | Tagged , | Leave a comment
Advertising

Edge 119.0.2151.97 / 118.0.2088.122 fixes CVE-2023-6345

Posted on 2023-11-30 by guenni

[German]The vulnerability CVE-2023-6345 in Google's Chromium browser also affects the Microsoft Edge browser. Microsoft has released an update of the Edge (Chromium) browser in the extended and stable channel on November 29, 2023 to fix the already exploited vulnerability. Advertising

Posted in browser, Security, Software, Update | Tagged , , | Leave a comment

Google Chrome 118.0.5993.15 and 119.6045.199/.200

Posted on 2023-11-29 by guenni

[German]Google has released updates of the Google Chrome browser in the Stable Channel for Mac, Linux and Windows to version 119.0.6045.199/.200 on November 28, 2023. Version 118.0.5993.15 was released in the Extended Stable Channel. The Android app of the Chrome … Continue reading →

Posted in browser, Security, Software, Update | Tagged , , | Leave a comment
Advertising

Fingerprint sensors and thus Windows Hello can be bypassed via vulnerabilities

Posted on 2023-11-26 by guenni

[German]Microsoft is using Windows Hello in its operating system for password-free login. This is supposed to be more secure than a password, as it cannot be stolen. Security researchers were asked by Microsoft's Offensive Research and Security Engineering (MORSE) to … Continue reading →

Posted in computer, devices, Security, Windows | Tagged , , | Leave a comment

Thunderbird 115.5.0

Posted on 2023-11-23 by guenni

[German]The developers of Thunderbird have released another update of the email client to version 115.5.0 on November 21, 2023. It is an update that is intended to fix some bugs and vulnerabilities. Thanks to the readers for the tips – … Continue reading →

Posted in Security, Software, Update | Tagged | Leave a comment

Edge 119.0.2151.72 / 118.0.2088.109

Posted on 2023-11-17 by guenni

[German]Microsoft has released an update of the Chrome browser in the Extended Stable to 118.0.2088.109 on November 16, 2023, as well as an update to Edge 119.0.2151.72. Thanks to the reader for the tip. Here is some information about the … Continue reading →

Posted in browser, Security, Update | Tagged | Leave a comment
Advertising

When ransomware groups (AlphV) snitch on victims to the SEC

Posted on 2023-11-17 by guenni

[German]New twist in the cat-and-mouse game between ransomware groups and their victims. Some victims try to keep a cyber incident secret. The ransomware group AlphV (also known as BlackCat) has made a new volte face in the field of extortion. … Continue reading →

Posted in Security | Tagged | 1 Comment

Attack on critical infrastructure in Denmark; 22 utilities compromised in May 2023

Posted on 2023-11-17 by guenni

[German]In May 2023, there were probably two waves of cyberattacks on critical infrastructure (KRITIS) in Denmark, as has only now become known. In a report published by SektorCERT, the whole thing is described as the largest known cyberattack on Danish … Continue reading →

Posted in Security | Tagged | Leave a comment