Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Category Archives: Security
Warning: Avoid NVTrimmer for Nvidia driver customization
[German]Within the last days I've seen several blog posts recommending the tool NVTrimmer. The tool is used for customizing Nvidia driver installation packages. If you intend to use this tool, read this blog post to become aware of the risks.
Security update for Foxit PDF Reader
[German]In addition to a security update for Adobe's PDF tools (see Adobe Acrobat Security Update (October 2018)), Foxit also released a security update for it's PDF reader.
Facebook: Hackers accessed 50 Mio. Access Tokens
[German]Facebook has just admitted a vulnerability within it's network. Hackers probably was able to stole access tokens and abuse 50 million accounts. Possibly more accounts are affected, Facebook has reset 90 million accounts. In addition, a White Hat hacker on … Continue reading
Google changes sign-in and Cookie policy in Chrome 70
[German]After Chrome developers implemented a 'mandatory sign-in' in Google Chrome 69, the received a slash back from media. Now Google pulls back and announced some changes in upcoming Google Chrome 70.
Windows ALPC vulnerability (CVE-2018-8440) used in Exploit Kit
The ALPC vulnerability (CVE-2018-8440), which is present in all supported and unpatched Microsoft Windows versions, is now being exploited by the Metasploit Kit.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
The costs of a data breach
IBM Security and Ponemon Institute have released the 2018 Cost of Data Breach Study, based on conducted interviews with more than 2,200 IT, data protection, and compliance professionals from 477 companies that have experienced a data breach over the past … Continue reading
Windows 0-day vulnerability in Jet Engine (Sept. 2018)
[German]There is a zero day vulnerability in Microsoft's Jet Engine, which is used in applications under Windows. The vulnerability is unpatched, but not critical.
Security update: GhostScript 9.25 (2018-09-13)
[German]Just a brief information for users of GhostScript software (often used in software to display or create PDF files). The developers have already released a security update to GhostScript 9.25 on September 13, 2018, which closes vulnerabilities. An update is … Continue reading
CSS vulnerability crashes iPhone, Safari, IE, and Edge
[German]A newly discovered CSS vulnerability allows attackers to crash iPhones with iOS. In the browsers Safari (macOS), IE and Edge (Windows), the attack freezes the respective browser.
Bristol Airport affected by ransomware
[German]On September 14, 2018, British Airport Bristol has been hidden by a ransomware attack. To fix this issue, the flight information system had to be shut down.