[German]International law enforcement agencies (FBI, BKA etc.) have broken up a suspected Russian espionage network that was infecting routers from the manufacturer Ubiquiti. The spy network has been shut down last week. However, users of Ubiquiti routers should now reset their devices, assign their own password and also update them to the latest firmware version.
[German]Since February 13, 2024, a vulnerability CVE-2024-21410 has been known, through which attackers can access NTLM hashes via Microsoft Exchange Server and then misuse them for NTLM relay or pass-the-hash attacks. I have now read that more than 28,500 Exchange servers are vulnerable via CVE-2024-21410. Administrators must therefore take action and secure their IT infrastructure. In this context, I also came across an analysis by Frank Carius, who sees the vulnerability not in the Exchange Server but in the IIS. So there is potentially much more affected.
[German]On February 20, 2024, the Mozilla developers released the new Firefox 123 and the maintenance update of Firefox 115.8 ESR. Firefox 123 is a new development branch. Here is a brief overview of the updates in question, including the fixes and new features.
[German]Google has released updates to the Google Chrome browser (branch 122) in the stable channel on February 20, 2024. The Extended Stable Channel has also received an update. The Android and iOS app of the Chrome browser have also been updated. Some of the updates contain security fixes. Here is an overview of these updates. Thanks to the reader for pointing this out. Continue reading
[German]The developers of Thunderbird have released another update of the email client to version 115.8.0 on February 20, 2024. It is an update that is intended to fix some bugs and vulnerabilities. Continue reading
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Once again, I'm bringing up an issue, that I've already touched on in posts about patchday issues with failed Windows update installations. Errors can occur during Windows update installation if the Microsoft Edge browser is not installed on the system. A blog reader got in touch at the beginning of February 2024 and confirmed another such case.
Zyxel has released a security patch "ZLD5.37 Patch2" for its ZyWALL ATP, ZyWALL USG FLEX and ZyWALL VPN solutions on February 20, 2024, which closes the vulnerabilities CVE-2023-6397, CVE-2023-6398, CVE-2023-6399, CVE-2023-676 in the products. Details can be found in the Zyxel security advisory What's New ZLD5.37 Patch2. Thanks to the reader for the hint and the advice to install the update immediately.
[German]Cyber incident at the Berlin-based German software company PSI Software. It was known that they had been the victim of a cyberattack on February 15, 2024 – I had reported on the suspicion and confirmation came later. Now the company has provided some more information. Internally, ransomware has probably done its work on the systems. The suspicion that customer systems (especially in the sector of critical infrastructures) were affected has not yet been confirmed.
[English]At the begin of February 2024, it became known that the provider of remote maintenance software, AnyDesk, was the victim of a hack of its production environment. I pointed out early on that the hack had already taken place in December 2023. As a result, a certificate change for the digital signing of AnyDesk clients is pending, an old certificate from "philandro Software GmbH" has been recalled and is now invalid. Newly signed clients should be available from February 12 or 13, 2024.
[German]On February 8, 2024, ESET updated some of its antivirus products at short notice. The information about a vulnerability was "on hold" until February 14, 2024. ESET has now published a security advisory confirming a Local Privilege Escalation vulnerability in ESET products. This vulnerability was fixed by the updates announced on February 8th.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
