Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Category Archives: Security
Flubot Android Trojan infrastructure shut down by Europol
[German]The Android banking Trojan Flubot caused major damage to victims on Android systems since 2021. The last major campaign was reported a few days ago. Now Europol seems to have managed to shut down the infrastructure of the Flubot Android … Continue reading
Thunderbird 91.10.0
[German]In addition to the Firefox developers providing a security update for the Firefox browser (see Firefox 101.0 and 91.10esr released – with security fixes), these critical vulnerabilities in the Thunderbird email client have also been fixed with the May 31, … Continue reading
Firefox 101.0 and 91.10esr released – with security fixes
[German]Mozilla developers have released versions 101.0 and 91.10esr of the Firefox browser on May 31, 2022. These are maintenance updates, which fix bugs critical vulnerabilities.
Microsoft Edge 102.0.1245.30 (security update, May 31, 2022)
[German]Microsoft has published a security advisory on May 31, 2022, to point out various closed vulnerabilities in the Chromium Edge browser. At the end of the month, Edge version 102.0.1245.30 was released to fix 24 vulnerabilities.
Follina: Attack via Word documents and ms-msdt protocol (CVE-2022-30190)
[German]A new attack vector has been known since the weekend that abuses the Microsoft Support Diagnostics Utility via the ms-msdt: protocol to download and abuse malicious Word documents (or Excel spreadsheets) from the web. Microsoft has since issued a support … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Microsoft finds vulnerabilities in apps from major mobile providers (May 2022)
[German]The Microsoft 365 Defender Research Team has found some vulnerabilities in a mobile framework from mce Systems. The problem: This framework is used by some apps that mobile providers deliver preinstalled on their smartphones. Thus, millions of users were vulnerable … Continue reading
Vulnerabilities CVE-2022-27507 and CVE-2022-27508 in Citrix ADC and Citrix Gateway
[German]Two vulnerabilities CVE-2022-27507 and CVE-2022-27508 exist in Citrix ADC and Citrix Gateway, for which the vendor has issued a security bulletin. The vulnerabilities discovered in Citrix ADC and Citrix Gateway allow attackers to launch a distributed denial-of-service (DDoS) attack. The … Continue reading
Microsoft provides guidance on protecting against KrbRelayUp attacks in Windows domains
[German]KrbRelayUp attacks allow local privilege escalation in Windows domain environments where LDAP signing is not enforced. The default Active Directory settings are still insecure. However, Microsoft has now explained in a post how administrators can protect systems against KrbRelayUp attacks … Continue reading
Interpol arrests Nigerian head of BEC fraud gang
[German]Interpol, together with the Nigerian police, was able to arrest the head of a BEC (Business Email Compromise) gang. The gang had been targeted by investigators for numerous email scams, and security researchers from Palo Alto Networks and other firms … Continue reading
Windows issue: Defender collides with FMAPOService
[German]In April 2022, I had reported issues with Windows Defender on Windows 10 (20H2). From extreme RAM usage to startup problems with Word or effects like black screen after user login has been observed/reported. Some issues were supposedly fixed by … Continue reading