[German]I'll combine two topics into one post. Google has released its Android 15 (Vanilla Ice Cream) as an Android Open Source Project (ASOP). This means that the operating system is available for various mobile device manufacturers – they can port Android 15 to their models and roll it out. I also received (surprisingly) Android 14 on the Motorola Moto G13 a few weeks ago.
[German]Veeam warns of a critical RCE vulnerability in Backup & Replication. Blog reader j. pointed out the vulnerability yesterday in the discussion area (thanks for that) – but I had already heard about it elsewhere. The vulnerability CVE-2024-4071 was classified with a CVSS index of 9.8, so it should be fixed as soon as possible. Veeam has therefore published corresponding updates to its Backup & Replication software to close these vulnerabilities. But there are other vulnerabilities in various products. Here is a brief overview of this topic.
[English]Brief information for administrators of Sophos firewalls – a reader has informed me that since September 5, 2024, he has been observing increased attempts to attack his Sophos firewalls. And the VPN portal in particular is being flooded with login versions via port 443. The IP from which the attacks are being launched points to Russia. There are indications that hackers are trying to access corporate networks via cracked VPN accesses. Here is the information I have.
[German]Zyxel has released security updates to close a critical vulnerability in several of its business routers. These vulnerabilities, rated with a CVSS v3 score of 9.8, may allow unauthenticated attackers to inject operating system commands. Updates are available to close the vulnerabilities.
[German]In anticipation of the upcoming releases of Windows 11 24H2 and Windows Server 2025 at the end of August 2024, Microsoft has published a tech community article on the topic of "SMB Security Hardening". The whole thing is part of the Microsoft Secure Future Initiative (SFI), and the operating systems are to have hardened SMB settings right from the start in order to better protect against cyberattacks.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On September 3, 2024 (first Tuesday of the month), Microsoft released non-security updates for Microsoft Office 2016. I'll summarize some information about these updates here in the blog.
[German]A German blog reader has just pointed out a bug in the Microsoft MPIP-AIP client for Purview Information Protection that can cause files on the OneDrive online storage to become corrupted. If you don't have a backup, these files are then lost (safe for eternity, so to speak). Microsoft has confirmed the bug, two "clients or services" work independently of each other. Let me summarize the relevant information for the reader.
[German]Brief information for Facebook users. There are indications that a campaign is running via ads on Facebook, which pretends to be a fake Trojan in the browser and asks the user to call a "Microsoft support page". This is of course also fake and amounts to fraud. I came across such an ad the other day, and I'll post it briefly on the blog.
[German]I'm once again posting information here in the blog that I stumbled across recently. Anyone who is concerned about Windows security should keep an eye on the command line tool licensingdiag.exe. It is another "living of the land" tool that can be used for side-loading DLL attacks. This is because there is an entry in the registry that specifies which DLL is to be loaded from which path.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
[