Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Category Archives: Security
Warning: Upgrade to Google Chrome 99.0.4844.74 and above
[German]In mid-March 2022, Google developers updated the Chrome browser to version 99.0.4844.74, fixing 11 security vulnerabilities (see Chrome 99.0.4844.74 fixes 11 vulnerabilities). Microsoft Edge has also received a security update (Microsoft Edge 99.0.1150.46 released). Now German Cyber Security agency BSI … Continue reading
7 teenagers arrested in connection with the LAPSUS$ hacks
[German]A few hours ago, I reported in the article Lapsus$ hacker group debunked? Teenager from Britain and Brazil suspected? that security researchers believe they have uncovered the mastermind of the LAPSUS$ gang. It has now been revealed that British police … Continue reading
Lapsus$ hacker group debunked? Teenager from Britain and Brazil suspected
[German]The Lapsus$ group has been causing a furore with spectacular hacks since the beginning of 2022. Nvidia, Samsung, Microsoft, Okta are names of companies that come up in this context as victims. Security researchers believe they have unmasked members of … Continue reading
Vulnerability in Windows 3CX telephone systems
[German]Anyone running a 3CX system (telephone system) under Windows in a version below v18 Update 3 (Build 450) should react. The manufacturer has released a security update for this product in the form of v18 Update 3 (Build 450).
SoftMaker Office 2021 Revision 1044 released (March 22, 2022)
SoftMaker has released an update in the form of revision 1044 for its Office 2021 (for Windows, Mac and Linux). The Windows MSI setup now allows the selection of a user-defined destination folder for programs again. In addition, a bug … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Hundreds of HP printer models with RCE vulnerability (March 2022)
[German]HP warns in two security advisories about remote code execution (RCE) and information disclosure vulnerabilities in hundreds of its printer models. Attackers could exploit the vulnerability to inject malicious code into systems. However, the manufacturer has provided firmware updates to … Continue reading
Lapsus$ hacks: statements from Okta and Microsoft
[German]Yesterday, two hacks of big players in the IT scene by the Lapsus$ gang became known. The group claimed a hack of the authentication service OKTA, possibly affecting customers. And Microsoft is investigating reports that 37 GB of data (source … Continue reading
Anonymous leaks 10 GByte Nestle data after hack
[German]The hacker collective Anonymous has made good on its threat to attack major companies that it believes have not withdrawn from Russia. Now the hacker collective claims to have leaked 10 Gbytes of data from food giant Nestle. Here is … Continue reading
Authentication service OKTA hacked by Lapsus$?
[German]Extremely unpleasant story if the whole thing turns out to be true. According to a report, the provider OKTA is investigating a possible hack. Okta is a provider of authentication services in the cloud, so a successful hack could have … Continue reading
Vulnerability CVE-2022-22988 in Western Digital EdgeRover desktop application allows admin privileges (macOS, Windows)
[German]I'm posting this briefly here on the blog because people in the readership may be using Western Digital's EdgeRover desktop application on macOS or Windows. The vulnerability CVE-2022-22988 in older versions of the app allows attackers to gain elevated privileges … Continue reading