Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Category Archives: Security
Data leak at Chinese manufacturer reveals information on surveillance devices
A Chinese manufacturer has inadvertently disclosed the data of surveillance devices. An unsecured database, which was freely accessible on the internet, contained 3 billion data records with details of surveillance systems from Chinese manufacturer Raysharp.
Critical PuTTY vulnerability CVE-2024-31497 leaks private keys
[German]The free software PuTTY can be used to establish connections via Secure Shell, Telnet, remote login or serial interfaces with a server. However, there is a critical vulnerability in the software in question (CVE-2024-31497) that can be used to reconstruct … Continue reading
US CISA orders admins in authorities to mitigate the cyber risks of the Microsoft Cloud
[English]On April 2, 2024, the US cybersecurity authority CISA issued a directive to the administrators of US authorities requiring them to "mitigate" or eliminate the cyber risks posed to customers by a hack of the Microsoft Cloud or the Microsoft … Continue reading
Unsecured Microsoft Azure Server exposes passwords etc. of Microsoft systems (Feb. 2024)
[German]Security researchers from SOCRadar have discovered an unsecured storage server on Microsoft Azure on which internal information about Microsoft's Bing search engine was stored. Well, the storage server, which was freely accessible to anyone, only contained unimportant stuff from Microsoft … Continue reading
Microsoft Office Updates (April 9, 2024)
[German]On April 9, 2024 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Below you will find an overview of … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Windows Server 2012 / R2 and Windows 7 (April 9, 2024)
[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on April 9, 2024. Support for Windows 7 SP1 and Windows Server 2008 R2 expired in January 2024. However, updates for Windows Embedded Standard 7 can be downloaded … Continue reading
Posted in Security, Update, Windows
Tagged Patchday 4.2024, Security, Update, Windows
Leave a comment
Patchday: Windows 11/Server 2022-Updates (April 9, 2024)
[German]On April 9, 2024 (second Tuesday of the month, patch day at Microsoft), Microsoft also released cumulative updates for Windows 11 23H2 to 21H2. Windows Server 2022 and Windows Server 23H2 also received updates. Here are some details about these … Continue reading
Posted in Security, Update, Windows
Tagged Patchday 4.2024, Security, Server 2022, Update, Windows 11
Leave a comment
Patchday: Windows 10-Updates (April 9, 2024)
[German]On April 9, 2024 (second Tuesday of the month, patch day at Microsoft), various cumulative updates were released for the supported Windows 10 builds (from the RTM version to the current version) as well as for the Windows Server counterparts. … Continue reading
Posted in Security, Update, Windows
Tagged Patchday 4.2024, Security, Update, Windows 10
Leave a comment
Microsoft Security Update Summary (April 9, 2024)
[German]On April 9, 2024, Microsoft released security updates for Windows clients and servers, Office and other products. The security updates address 147 vulnerabilities (CVEs), including three critical vulnerabilities. Below is a compact overview of these updates that were released on … Continue reading
Windows NTLM credentials vulnerability CVE-2024-21320: Fix from 0patch
[German]There is a vulnerability in Windows (CVE-2024-21320) that exposes NTLM credentials about Windows topics. Microsoft patched the vulnerability CVE-2024-21320 in January 2024. This patch provides a policy to prevent the exposure of NTLM credentials when theme files are located on … Continue reading