[German]Microsoft's measures to prevent the loading of malicious kernel drivers don't seem to be working at all. I've had the issue on my radar for weeks, because the driver block list doesn't really seem to work. Now security researchers at Talos have revealed a campaign in which open source tools use forged signature timestamps to load malicious Windows drivers.
[German]As of July 11, 2023, various security updates have been released for Windows Server 2008 R2 (in its 4th ESU year) and Windows Server 2012/R2 (the updates may still install on Windows 7 SP1). Here is an overview of these updates for Windows Server 2008 R2 and Windows Server 2012/R2. Continue reading
[German]On July 11, 2023 (second Tuesday of the month, Microsoft patch day), Microsoft also released cumulative updates for Windows 11 22H1 and 22H2. In addition, Windows Server 2022 received an update. Here are some details about these updates, which are supposed to fix vulnerabilities as well as problems.
Continue reading
[German]On July 11, 2023 (second Tuesday of the month, Patchday at Microsoft), several cumulative updates were released for the supported Windows 10 builds (from RTM version to current version) as well as for the Windows Server counterparts. Here are some details on the respective security updates for Windows 10.
Continue reading
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On July 11, 2023, Microsoft released security updates for Windows clients and servers, for Office – as well as for other products. The security updates eliminate 130 vulnerabilities, five are 0-Days. Below is a compact overview of these updates released on Patchday.A list of updates can be found on this Microsoft page. Details on the update packages for Windows, Office, etc. are available in separate blog posts.
Continue reading
[German]Microsoft seems to have shipped a new bug in Outlook with the late June 2023 Office updates. A blog reader pointed out to me that he is struggling with the problem that every time he starts Outlook, it asks if windows open in the previous session should be reopened. However, there are no windows to reopen and the options to disable the prompt are missing from the settings. More Outlook users have this problem. The remedy is a direct registry entry.
[German]There has been a confirmed data leak at German Deutsche Bank and it's Postbank, in which personal customer data such as name and IBAN (international banking number) have fallen into the hands of third parties. Customers who have used the "account switching service" of these banks are affected and have now been informed about the incident by letter. The victims face increased security risks. From my information it's likely that the banks are victim of the MOVEit transfer vulnerarabilities). The banks are also likely to face claims for damages.
[German]After the U.S. recently declared that it has implemented the terms of the EU-U.S. data transfer agreement "Transatlantic Data Privacy Framework" (DPF) and complies with the requirements, the EU Commission is following suit. On July 10, 2023, the EU Commission issued the expected adequacy decision for the EU-U.S. data transfer agreement "Transatlantic Data Privacy Framework" (DPF). The business community is celebrating the decision, Max Schrems with his organization noyb has announced the review of the DPF by the European Court of Justice.
[German]Unpleasant story that once again shows that apps should be viewed with great caution and used with restraint. Security researchers have discovered two apps in the Google Play Store that contain spyware that sends data directly to China. Apps like file managers are quickly installed on an Android device.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
[