BMW Group seems to be victim of the Everest ransomware group

Posted on 2025-09-20 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A reader has brought on September 18, 2025 some information to my attention that I covered in timely manner within my German blog. The Everest ransomware group lists BMW group as one of its victims. Everest claimed that a successful attack also resulted in the theft of internal documents (e.g., for auditing purposes). The incident dates back to September 14, 2025. I was able to view some documents since publishing my German blog post.

Continue reading →

Posted in Security | Tagged , | Leave a comment

Vulnerability CVE-2025-55241 in Entra ID enabled global admin takeover in tenants

Posted on 2025-09-19 by guenni

[German]A brief update from this week: On September 17, 2025, details of the CVE-2025-55241 vulnerability in Microsoft Entra ID were made public. This vulnerability would have allowed any attacker to obtain tokens enabling them to assume the global administrator role for any tenant.

Continue reading →

Posted in Cloud, Security | Tagged , , , , | Leave a comment

Chrome and Edge: Critical vulnerabilities, AI and Adobe PDF Reader

Posted on 2025-09-19 by guenni

[German]To end this week, here is a summary of the two browsers Chrome and Edge. Both browsers have critical security vulnerabilities that are being exploited. Browser updates are recommended. Google is also enhancing its Chrome browser (outside the EU) with AI. Edge is set to receive the Adobe PDF Reader in the near future.

Continue reading →

Posted in browser, Security, Software, Update | Tagged , , | 1 Comment

End of support for Windows 10 and Office 2016/2019 in October 2025 – Part 1

Posted on 2025-09-19 by guenni

Update[German]Quick note for users of Windows 10 22H2, Microsoft Office 2016, and Microsoft Office 2019. Microsoft recently reminded users that support for these products will end on October 14, 2025. On this date, security updates for Windows 10 and the aforementioned Office versions will be discontinued.

Continue reading →

Posted in Office, Security, Windows | Tagged , , , | Leave a comment

WatchGuard warns of vulnerability CVE-2025-9242 in Firebox

Posted on 2025-09-18 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The provider WatchGuard is active in network security and offers a Firebox appliance in this area. In a recent security alert dated September 17, 2025, the provider points out a critical vulnerability CVE-2025-9242 in its Firebox appliance that allows an attacker to execute code.

Continue reading →

Posted in Security | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

MySonicWall Cloud Backup File Incident: Configuration backup disclosed

Posted on 2025-09-17 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Brief note to readers who use SonicWall and have not yet received this information today. There was an incident in which backup files of the firewall configuration stored in certain MySonicWall accounts were exposed in the cloud. This allowed attackers to read the configuration information.

Continue reading →

Posted in Cloud, Security, Software | Tagged , , | Leave a comment

Windows 10/11: September 2025 updates cause SMBv1 issues

Posted on 2025-09-16 by guenni

Windows[German]With the security updates for Windows 10 and Windows 11 released on September 9, 2025, a problem with accessing SMBv1 network shares has crept in. There are reader comments about this here in the blog. Now there are indications that Microsoft has confirmed the problem, at least internally.

Continue reading →

Posted in issue, Update, Windows | Tagged , , , | Leave a comment

Windows 11 24H2: Dirac audio issues fixed, upgrade suspension lifted

Posted on 2025-09-16 by guenni

Windows[German]Microsoft has also marked a known bug that caused Dirac Audio issues in Windows 11 24H2 as fixed as of September 12, 2025. The support article from December 2024 describing the issue of Dirac Audio losing audio output when using cridspapo.dll has been updated. And the upgrade stop for Windows 11 24H2 has been lifted.

Continue reading →

Posted in issue | Tagged , | 1 Comment

Microsoft 365: Will emails be automatically deleted again?

Posted on 2025-09-15 by guenni

[German]I'll bring up another rather crude observation: In the spring of 2025, an administrator reported that contacts and later emails were mysteriously deleted from some of his users' Microsoft 365 accounts, initially sporadically. Now I've come across a similar case on the Microsoft forum.

Continue reading →

Posted in Cloud, issue | Tagged , , , | Leave a comment

Unauthorized logins to Microsoft accounts despite 2FA – Part 2

Posted on 2025-09-14 by guenni

Stop - Pixabay[German]It's a crude situation that I still can't quite wrap my head around. I got reports form users, that for several weeks now, third parties have been accessing Microsoft accounts, as can be seen in their activity history. The users had activated two-factor authentication for their accounts. How can this be? And even more bizarre: readers whom I asked to check their account activity history found nothing there (the same is the case for me and my Microsoft test accounts).

Continue reading →

Posted in Cloud, Security | Tagged , , | 1 Comment