[German]Brief notice for users of the Thunderbird email client who are still on the 102 development branch. The Mozilla team has just released the update from version 102.15.0 to version 115.2.0 of the current development branch. You can have Thunderbird updated – but this may bring some (unpleasant) surprises.
[German]Singapore-based security vendor Group-IB released a security report that points to specific activity by a group of cybercriminals called W3LL. The cybergang has developed a phishing kit to hijack Microsoft 365 accounts and offers this service to at least 500 other cybergangs through a secret W3LL store. Until now, the provider has been "operating under the radar" of security agencies because customers could only access the offerings by referral. The W3LL phishing tools were used to attack more than 56,000 Microsoft 365 accounts belonging to companies in the U.S., Australia and Europe between October 2022 and July 2023.
[German]Brief information for people who use Windows and were used to the fact that printer drivers from the manufacturers were also updated by Microsoft via Windows Update. In the future, Microsoft will increasingly rely on the Mopria standard for printers/scanners. Now Microsoft has announced that the distribution of older printer drivers via Windows Update is to be phased out. This will probably only take effect for new printer driver from 2025 and probably only for Windows 11 and successors, since Windows 10 will reacht end of support in October 2025.
Apple has released another slew of security updates for its macOS, iOS/iPadOS and also WatchOS operating systems as of September 7, 2023. These updates fix two 0-day vulnerabilities that were abused by NSO Group's Pegasus spyware to monitor mobile devices.
[German]In mid-August 2023, security researcher Jaroslav Lobacevski had made public four vulnerabilities (CVE-2023-40031, CVE-2023-40036, CVE-2023-40164, CVE-2023-40166) in Notepad ++ editor for Windows. The vulnerabilities' rating ranges from medium to high. The developer, having known about these vulnerabilities for months, has now fixed them with the update to Notepad++ v8.5.7.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has updated the Edge browser in stable channel to version 116.0.1938.76 as of Sept. 7, 2023. The release notes says "Fixed various bugs and performance issues for Stable release". The security release notes state that the update includes the latest Chromium browser security fixes in addition to bug fixes and stability improvements (thanks to EP for pointing this out).
[German]The hack of Microsoft's Azure cloud by the suspected Chinese group Storm-0558 from May to June 2023 was possible due to a stolen private MSA key and bugs. At the time, accounts at Exchange Online via OWA and Outlook.com had been hacked from 25 organizations. It was unclear how the attackers came into possession of a private MSA key. Now Microsoft has announced that the MSA key came from a so-called Windows crash dump, which was created on a Microsoft PC and then dumped via a compromised system.
[German]In August, the so-called Downfall vulnerability in processors had become known, which allows information to be leaked. Now Microsoft has updated its support post with notes about the downfall vulnerability in Windows and removed information on how to disable the protections. Furthermore, after installing the August 2023 preview updates, there was an issue with Windows delivering individual users into an UNSUPPORTED_PROCESSOR Bluescreen. The motherboard manufacturer MSI has now delivered a BIOS update that is supposed to correct this problem. Here is an overview of these two issues.
[German]As of September 5, 2023, Google has updated the Chrome browser for its platforms (desktop, Android, iOS) (see Google Chrome 116.0.5845.179/.180 security update). In addition to security fixes and stability improvements, users will suddenly see a pop up with privacy notice. In the pop up, people will be informed about changes that the browser can make regarding displayed ads and they can accept or reject them. This change is related to the fact that Google wants to eliminate ad tracking via third-party cookies in Chrome and replace it with other forms.
[German]Google has released updates to the Google Chrome browser 116 in the stable and extended channels for Mac, Linux and Windows as of September 5, 2023. These are security updates that are rolled out and are intended to eliminate vulnerabilities (classified as "high"). Furthermore, there is an update of the Chrome app for Android as well as for iOS.
Continue reading
MVP:
2013 – 2016
WIMVP:
2017 – 2020
