Thunderbird: Update from 102.15.0 to 115.2.0 is offered

[German]Brief notice for users of the Thunderbird email client who are still on the 102 development branch. The Mozilla team has just released the update from version 102.15.0 to version 115.2.0 of the current development branch. You can have Thunderbird updated – but this may bring some (unpleasant) surprises.

Continue reading

Posted in issue, Software | Tagged | 2 Comments

Advertising

W3LL phishing kit can bypass multifactor authentication; thousands of Microsoft 365 accounts hijacked

Sicherheit (Pexels, allgemeine Nutzung)[German]Singapore-based security vendor Group-IB released a security report that points to specific activity by a group of cybercriminals called W3LL. The cybergang has developed a phishing kit to hijack Microsoft 365 accounts and offers this service to at least 500 other cybergangs through a secret W3LL store. Until now, the provider has been "operating under the radar" of security agencies because customers could only access the offerings by referral. The W3LL phishing tools were used to attack more than 56,000 Microsoft 365 accounts belonging to companies in the U.S., Australia and Europe between October 2022 and July 2023.

Continue reading

Posted in Cloud, Security | Tagged , | Leave a comment

Windows 3rd party printer driver: Microsoft switches to Mopria support; new legacy drivers won't be shipped via Windows Update(from 2025)

Windows[German]Brief information for people who use Windows and were used to the fact that printer drivers from the manufacturers were also updated by Microsoft via Windows Update. In the future, Microsoft will increasingly rely on the Mopria standard for printers/scanners. Now Microsoft has announced that the distribution of older printer drivers via Windows Update is to be phased out. This will probably only take effect for new printer driver from 2025 and probably only for Windows 11 and successors, since Windows 10 will reacht end of support in October 2025.

Continue reading

Posted in Update, Windows | Tagged , , | Leave a comment

Security updates for macOS, iOS/iPadOS close two 0-Days from NSO-Group (Pegasus Spyware)

Apple has released another slew of security updates for its macOS, iOS/iPadOS and also WatchOS operating systems as of September 7, 2023. These updates fix two 0-day vulnerabilities that were abused by NSO Group's Pegasus spyware to monitor mobile devices.

Continue reading

Posted in devices, ios, macOS, Security, Update | Tagged , , , | 1 Comment

Notepad++ v8.5.7 fixes vulnerabilities

Sicherheit (Pexels, allgemeine Nutzung)[German]In mid-August 2023, security researcher Jaroslav Lobacevski had made public four vulnerabilities (CVE-2023-40031, CVE-2023-40036, CVE-2023-40164, CVE-2023-40166) in Notepad ++ editor for Windows. The vulnerabilities' rating ranges from medium to high. The developer, having known about these vulnerabilities for months, has now fixed them with the update to Notepad++ v8.5.7.

Continue reading

Posted in Security, Software, Update | Tagged , , | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Edge 116.0.1938.76

Edge[German]Microsoft has updated the Edge browser in stable channel to version 116.0.1938.76 as of Sept. 7, 2023. The release notes says "Fixed various bugs and performance issues for Stable release". The security release notes state that the update includes the latest Chromium browser security fixes in addition to bug fixes and stability improvements (thanks to EP for pointing this out).

Posted in browser, Update | Tagged | 1 Comment

Advertising

Microsoft's Storm-0558 cloud hack: MSA key comes from Windows crash dump of a PC

[German]The hack of Microsoft's Azure cloud by the suspected Chinese group Storm-0558 from May to June 2023 was possible due to a stolen private MSA key and bugs. At the time, accounts at Exchange Online via OWA and  Outlook.com had been hacked from 25 organizations. It was unclear how the attackers came into possession of a private MSA key. Now Microsoft has announced that the MSA key came from a so-called Windows crash dump, which was created on a Microsoft PC and then dumped via a compromised system.

Continue reading

Posted in Cloud, Security | Tagged , | Leave a comment

Microsoft revises downfall recommendations; MSI delivers BIOS update for UNSUPPORTED_PROCESSOR problem

Windows[German]In August, the so-called Downfall vulnerability in processors had become known, which allows information to be leaked. Now Microsoft has updated its support post with notes about the downfall vulnerability in Windows and removed information on how to disable the protections. Furthermore, after installing the August 2023 preview updates, there was an issue with Windows delivering individual users into an UNSUPPORTED_PROCESSOR Bluescreen. The motherboard manufacturer MSI has now delivered a BIOS update that is supposed to correct this problem. Here is an overview of these two issues.

Continue reading

Posted in Allgemein, issue, Windows | Tagged , , | 1 Comment

Advertising

Google Chrome shows updated privacy policy for ads, what does it mean

Chrome[German]As of September 5, 2023, Google has updated the Chrome browser for its platforms (desktop, Android, iOS) (see Google Chrome 116.0.5845.179/.180 security update). In addition to security fixes and stability improvements, users will suddenly see a pop up with privacy notice. In the pop up, people will be informed about changes that the browser can make regarding displayed ads and they can accept or reject them. This change is related to the fact that Google wants to eliminate ad tracking via third-party cookies in Chrome and replace it with other forms.

Continue reading

Posted in browser, Security | Tagged , | Leave a comment

Google Chrome 116.0.5845.179/.180 security update

Chrome[German]Google has released updates to the Google Chrome browser 116 in the stable and extended channels for Mac, Linux and Windows as of September 5, 2023. These are security updates that are rolled out and are intended to eliminate vulnerabilities (classified as "high"). Furthermore, there is an update of the Chrome app for Android as well as for iOS.
Continue reading

Posted in browser, Security, Software, Update | Tagged , | Leave a comment