Design flaw in WiFi protocol allows attackers to intercept network traffic

Posted on 2023-04-02 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Another small addendum from the end of March 2023. Security researchers have discovered a serious design weakness in the IEEE 802.11 WiFi protocol standard. This weakness could allow attackers to eavesdrop on WLAN access points and transmit network frames in plain text. This could, for example, inject malicious JavaScript commands into the network packets. It is an academic finding, and there is no evidence yet that this flaw is being exploited.

Continue reading →

Posted in Security | Tagged | Leave a comment

Hackers attack WordPress via unpatched Elementor Pro plugin

Posted on 2023-04-02 by guenni

WordPress administrators using the Elementor Pro plugin should urgently check if it is up to date and if WordPress has already been compromised (e.g. check urlscan.io to see what connections are going down). On March 18, 2023, NinTechNet security researcher Jerome Bruandet had discovered a vulnerability that can be exploited if the plugin is installed together with WooCommerce. Hackers are now actively exploiting the highly dangerous vulnerability in WordPress plugin Elementor Pro. The plugin for creating WordPress pages is used by over eleven million websites. Details have been summarized by the colleagues from Bleeping Computer here (thanks to the reader's tip).

Posted in Security, Software | Tagged , | Leave a comment

.NET updates: UUP distribution; preview updates finally optional, installation error fixed for KB5022729

Posted on 2023-04-02 by guenni

Update[German]Today another article summarizing issues around the topic "Installation of .NET Framework Updates", in which I also revisit some older points. For example, Microsoft already fixed the annoying automatic installation of .NET Preview updates in January 2023, so they are now really optional. Robert informed me that the .NET Framework installation issue with .NET update KB5022729 was fixed. And Microsoft is distributing .NET updates for Windows 11 22H2 via UUP.

Continue reading →

Posted in issue, Software, Update | Tagged , , | 1 Comment

March 2023: What's going up with AnyDesk?

Posted on 2023-04-02 by guenni

Stop - Pixabay[German]I'm picking up on a topic and posting it here on the blog for information purposes with a request for feedback from those affected. It's about the provider AnyDesk and its remote maintenance software of the same name. A reader pointed out to me that there were problems with the renewal of AnyDesk licenses. According to the reader, attempts to contact the sales or support department of this vendor have been "going nowhere" for 2-3 weeks. I did a little search on the Internet and followed the reader's advice. There are some sites where people share similar experiences.

Continue reading →

Posted in General, Software | Tagged , | 1 Comment

Is the Search in Outlook for Microsoft 365 broken? (March 2023)

Posted on 2023-04-02 by guenni

[German]A short note and also a question to the readers for those affected. I have information that the search no longer works for Outlook users from the circle of Microsoft 365 customers. Microsoft is aware of the problem, but nothing can be done, according to support.

Continue reading →

Posted in issue, Office | Tagged , | 2 Comments

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Windows 7/8.1: Firefox will be support until 3. Q. 2024 at least

Posted on 2023-04-01 by guenni

Mozilla[German]Good news for users of Windows 7 SP1 and Windows 8.1 who want to continue using these operating systems, which have (largely) fallen out of support with Microsoft, for a while longer. Mozilla has announced that they plan to support these operating systems for at least another year.

Continue reading →

Posted in browser, Software, Update, Windows | Tagged , , | 1 Comment

Leaked Microsoft mails provide interesting insights

Posted on 2023-04-01 by guenni

[German]I wrestled with myself a bit about what to do with the material, but then decided to publish the blog post after all. An anonymous source has send me leaked data that must have come from the "Microsoft universe" (maybe have been pulled as part of the Bing BigBang incident). Snippets of communications from Microsoft's mangement provide interesting insights into how Nadella and Co. conduct themselves publicly and how they act internally.

Continue reading →

Posted in General | Tagged | Leave a comment

Vulkan Files Exposes Russia's Cyberwar Strategies

Posted on 2023-03-31 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Files leaked from a whistle blower to German news magazine Süddeutsche Zeitung show how Russia under Putin is planning cyberwar. An evaluation by a media collective shows: Train and air lines are to be attaced, as well as energy supply and critical infrastructure. And our security culture continues to rely naively on increased digitization, including the cloud and up-to-date virus scanners.

Continue reading →

Posted in Security | Tagged | Leave a comment

World Backup Day March 31, 2023

Posted on 2023-03-31 by guenni

Amazon[German]March 31st of every year is "World Backup Day", and it's to remind people of the importance of backups. To mark the day, a little kaleidoscope of information around this topic.

Continue reading →

Posted in General, Security | Tagged , | Leave a comment

QNAP QTS update closes vulnerabilities (March 29, 2023)

Posted on 2023-03-31 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]As of March 29, 2023, manufacturer QNAP has published a security advisory for its QTS operating system. With an update of the QTS software, the manufacturer closes the vulnerabilities CVE-2022-3437, CVE-2022-3592, CVE-2022-27597, CVE-2022-27598, CVE-2022-42898, CVE-2023-22809. Here is a brief overview of this issue.

Continue reading →

Posted in devices, Security, Software, Update | Tagged , , | Leave a comment