Steam has endet support for Windows 7 and Windows 8.1 on January 1, 2024

Posted on 2024-01-02 by guenni

Windows[German]The time has come: The Steam platform has discontinued support for Windows 7, Windows 8.0 and Windows 8.1 as of January 1, 2024. This means that Steam client installations on these operating systems will no longer receive )(security) updates with immediate effect. Steam Support will also no longer provide technical support to users of these operating system platforms for issues related to the old operating systems. Continue reading →

Posted in Windows | Tagged , | Leave a comment

Happy New Year 2024

Posted on 2024-01-01 by guenni

That's what I wish all of my blog readers. 2024 will bring some changes for me – after blogging here since 2012 (and writing as a freelance author for 30 years) – it's time for me "to let it slowly fading out and enjoy my retirement, before it's too late". I will address it in a separate blog post soon.

(Source: Born – Vessel in the form of a flower – photo taken during a working stay in Japan)

Posted in General | 1 Comment

The 3CX MySQL security vulnerability and how the provider deals with critical words

Posted on 2023-12-31 by guenni

Stop - Pixabay[German]Recently, there was a warning to customers of the telephone system provider 3CX who have integrated an SQL database into the software for CRM purposes. I reported on the issue in the blog post 3CX warning: Disable SQL database integrations (Dec. 15, 2023). Users of the 3CX software complained about the slow processing of the early reported security vulnerability. One user subsequently contacted me by email because the response to criticism in the provider's forum was very specific: The posts were deleted. And the reader's account was also blocked – but the whole thing can be recapitulated, which I have done below.

Continue reading →

Posted in General | Leave a comment

Undocumented Google OAuth function misused by malware for account hijacking

Posted on 2023-12-30 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]There is an undocumented feature in Google's OAuth implementation that is being abused by several malware strains. These use an exploit that allows them to recover expired cookies. This allows them to then log in to online accounts, steal information or take over the account. The login even works if an online account has been reset. It is currently unclear whether Google has fixed the problem in the browser.

Continue reading →

Posted in Security | Tagged | Leave a comment

Outlook 365 bug: Signature entries are automatically entered vertically when creating an email

Posted on 2023-12-30 by guenni

[German]Before the end of the year, I will address a bug fix from Microsoft that was already fixed in November 2023. The bug affected Microsoft Outlook 365 and left users quite baffled. When you created a new email, the signature characters were inserted vertically into the email. Occurred when two <br> tags appeared in the signature.

Continue reading →

Posted in issue, Office | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Microsoft disables ms-appinstaller protocol again; CVE-2021-43890 misused by ransomware

Posted on 2023-12-29 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Microsoft has disabled the MSXI ms-appinstaller protocol because it was being abused by malware groups.  I remembered, that the vulnerability CVE-2021-43890 has been patched in Dec. 2021 and the protocol has been disabled long ago. Here is an overview of hat story.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

New Outlook for Windows 11: Adding of business accounts denied due to missing licensing

Posted on 2023-12-29 by guenni

[German]There is a strange story that users of the new Outlook client under Windows 11 have already encountered. The new Outlook client refuses to add additional mailboxes if you do not have a "corresponding license" (e.g. Exchange Online Plan 1). Microsoft has already confirmed this. I'll summarize some of the information that Jan pointed out to me in an email a few days ago.

Continue reading →

Posted in Office | Tagged , | Leave a comment

Denial of Service vulnerability CVE-2022-44684 in Windows Local Session Manager (LSM)

Posted on 2023-12-28 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A brief security information. Shortly before Christmas, a warning popped up about a Denial of Service vulnerability in the Windows Local Session Manager (LSM). However, this DoS vulnerability with the CVE identifier CVE-2022-44684 is quite "strange". The identifier indicates that the vulnerability was disclosed in 2022. During my research, I also saw that Microsoft had published something about this in December 2022 and January 2023 – but all of this has since been deleted. I've put together some information. And I'll add an interesting description of patched Outlook vulnerabilities that can also be combined into an attack vector.

Continue reading →

Posted in Office, Security, Software, Windows | Tagged , , | Leave a comment

Security: Social Engineering and VPN access

Posted on 2023-12-28 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]I often report on cyber attacks on companies here on the blog. In general, headlines about security incidents at large companies seem to be piling up. Fortunately, when companies release details about the incident, the security community can learn about the tactics used in the attack and be better able to protect their own organizations in the future. However, much remains under the table and the public is not told how the attack was able to occur.

Continue reading →

Posted in Security | Tagged | Leave a comment

Asper Biogene: genetic data stolen from 10,000 Estonians

Posted on 2023-12-27 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security and data protection incident in Finland involving patient health data. The genetic testing company Asper Biogene announced that unknown persons had accessed its database and the genetic data of around 10,000 people from Estonia who had applied for genetic testing there had been stolen by unauthorized third parties. The incident took place in November 2023, but only became known in mid-December 2023 through a newspaper report.

Continue reading →

Posted in Security | Tagged | Leave a comment