Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Category Archives: Security
Atlassian updates Confluence and Bambo due to critical vulnerabilities
[German]Another addendum from July 18, 2023 – that's when vendor Atlassian released its security bulletin for July 2023. Vulnerabilities in Confluence Data Center & Server (CVE-2023-22505 and CVE-2023-22508) and Bamboo Data Center (CVE-2023-22506) have become public. An attacker can exploit … Continue reading
Outlook blocks hyperlinks after July 2023 update; a workaround from Microsoft
[German]Since installing the July 11, 2023 security updates that closed a Security Feature Bypass vulnerability in Outlook, some users can no longer use hyperlinks without restrictions. Either a warning comes up or the hyperlinks no longer work. Now Microsoft has … Continue reading
Super Mario Game Installer Spreads SupremeBot Malware
[German]Another small addendum in terms of security. At the end of June 2023, security researchers from Cyble issued a warning about a Super Mario Game installer. Security researchers have come across a corresponding installer that contains a Trojan and spreads … Continue reading
Edge 114.0.1823.90 and 115.0.1901.183
[German]Microsoft has updated the Edge browser to version 1114.0.1823.90 as of July 21, 2023, as well as released version 115.0.1901.183 (thanks to the reader for the tip). They are security updates that fix bugs and vulnerabilities.
Stolen AAD key allowed (Storm-0558) wide-ranging access to Microsoft cloud services
[German]Microsoft had to admit on begin of July 2023 that suspected Chinese hackers from the Storm-0558 group were able to forge security tokens using a stolen private MSA key. Then then gain broad access to Microsoft cloud services, as Wiz … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Thunderbird 115.0.1
[German]The developers of Thunderbird have already released another update of the email client to version 115.0.1 on July 20, 2023. It is a bug fix update, which should eliminate errors and a vulnerability.
CISA warns: Citrix NetScaler ADC is under attack via CVE-2023-3519
[German]The U.S. cybersecurity agency CISA is warning administrators of Citrix NetScaler ADC installations. Threat actors have begun exploiting the NetScaler ADC vulnerability CVE-2023-3519, disclosed a few days ago, to implant webshells. Administrators should look for signs of compromise. Kompromittierung suchen.
Security updates: Foxit PDF Reader and PDF Editor 12.1.3
Brief information for people who use Foxit PDF Reader and/or PDF Editor. There are vulnerabilities in older versions which will be fixed by a security update to version 12.1.3.15356 (thanks to the reader for reminding me). Details can be found … Continue reading
TP-LINK TL-WR840N: Vulnerability allows stack buffer overflow DOS
There is a vulnerability in the firmware of the TP-Link router TP-LINK TL-WR840N that allows a remote attacker to perform a stack buffer overflow DOS attack. TP-Link does not want to publish a security advisory for this, but has made … Continue reading
After CISA report on Storm-0558 hack, Microsoft provides customers with enhanced cloud logging
[German]At the suggestion of the U.S. National Security Agency (CISA), Microsoft will provide its customers with enhanced cloud logging capabilities at no additional cost. This is intended to improve cyber defenses and incident response and is in response to the … Continue reading