[German]Microsoft has released a security update of the Edge (Chromium) browser with version 121.0.2277.112 in the Stable Channel on February 8, 2024. The Extended Stable was updated to version 120.0.2210.175. These are bug fix and security updates, which are intended to close vulnerabilities. Thanks to the readers for their comments.
[German]AnyDesk confirmed a few hours ago that the cyber incident took place "at the end of December 2023". In addition, the old certificate of "philandro Software GmbH" is now likely to be criticized. The background to this is that a third party had applied to DigiCert for a "revoke" and this application was granted. Here is an updated overview of what has happened in the last 24 hours.
[German]Short information for administrators who use ESET Endpoint Antivirus/Security under Windows. The manufacturer has released an important product update for its Windows product line, which should be installed immediately. The update fixes a vulnerability that will not be disclosed in an advisory until February 14, 2024.
[German]A very brief note, which was also pointed out to me by a blog reader. Forti has re-released all FortiOS versions on February 8, 2024. The release notes do not say what has been fixed in these versions. The reader confirmed my suspicion off the record that there is another critical SSLVPN bug.
[German]Quick note for administrators who use the load balancer LoadMaster from Progress Kemp. The provider has provided various firmware updates for its LoadMaster as of February 7, 2024. These should be installed immediately. Addendum: Information about CVE-2024-1212 in Progress Kemp LoadMaster added.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]A small addendum from yesterday regarding security. There is a critical vulnerability in JetBrains TeamCity Server that endangers on-premises servers. There is probably a security update available, which should be installed as soon as possible. I don't know who among the readership uses the package, I didn't know the name. I will summarize the necessary information in this article.
[German]The successful cyberattack on AnyDesk, a provider of remote maintenance software, is making quite a stir. Officially, the incident was confirmed by AnyDesk on February 2, 2024 (specifically Friday evening at 10:44 pm). Almost nothing is known – neither when, nor what exactly was hacked. I've been working on this topic since January 2024 and an overall picture is emerging from many bits and pieces of information. I now have various sources that indicate that the hack was noticed as early as December 20, 2023. Addendum: AnyDesk has confirmed my suspicions, see my text below.
[German]A news for Windows users, encrypting their disks with Bitlocker. A YouTuber demonstrates how a vulnerability in "external" TPM chips can be exploited to determine a Bitlocker key within seconds. All you need is a Bitlocker key sniffer in the form of a Raspberry Pi Pico for around 10 US dollar.
[German]Google has released updates to the Google Chrome browser in the Stable Channel for Mac, Linux and Windows on February 6, 2024. There were also updates for the Extended Stable Channel. The Chrome browser Android app has also been updated. The updates contain security fixes. Here is an overview of these updates. Continue reading
[German]On February 6, 2024, the Mozilla developers released the update of Firefox Firefox 122.0.1. It is a maintenance update that fixes some bugs.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
