[German]Modern vehicles are equipped with a lot of electronics and software so that they can access various functions as conveniently as possible. However, security researchers have identified serious weaknesses in vehicles from Honda, Nissan, Infiniti and Acura. In the U.S., the vehicle number (VIN) visible in the windshield is sufficient to crack such vehicles remotely, open them and then drive off with them.
[German]Google has updated Google Chrome in the 108 branch in the Stable Channel for Mac, Linux, and Windows, as well as the Extended Stable Channel, as of December 7, 2022. Thanks to reader EP for pointing this out. In addition, security organizations are warning users to update Google Chrome to at least version 108.0.5359.94/.95 as the closed vulnerability is being exploited. Continue reading
[German]Windows 11 already needs a lot of resources with its "little balconies and optical gimmicks". Especially the so-called "Input Experience" puts a strain on the CPU – I've read about 20% CPU resource consumption in Explorer. But with a small registry intervention this Input Experience can be deactivated if necessary.
[German]At the beginning of December 2022, there was an outage of the Exchange instances of the US provider Rackspace that lasted several days. Now the company has confirmed that a ransomware attack on its servers was the reason for this outage. It is unclear whether customer data was affected by this incident. There is at least a suspicion that the ProxyNotShell vulnerabilities enabled this attack.
[German]Netgear has released a last-minute patch to close a vulnerability in the firmware of the Nighthawk WiFi6 router (RAX30 AX2400) on December 1, 2022. A misconfiguration allowed attackers in router firmware prior to version V1.0.9.90 to communicate with these devices from the Internet as if they were on the consumer's local network. In addition, the firmware's auto-update function seems to be broken. Security provider Tenable has now published details about this.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]As of December 6, 2022 (first Tuesday of the month), Microsoft has released non-security updates for versions of Microsoft Office that are still supported. This month, there is only one update for Microsoft Office 2016. Microsoft Office 2013 has not received any updates. Here is a brief overview of the November 2022 updates.
[German]It looks like the Windows updates released by Microsoft in November 2022 may cause problems accessing SQL databases. Then the ODBC driver triggers a database access error. According to Microsoft, all Windows versions that are still supported (both clients and servers) are affected by this problem. There is no solution for this problem yet.
[German]Citrix is warning users since September 2022 about a vulnerability in its Citrx Workspace app. There are reports that Citrix SSON stored passwords in the process memory can be retrieved at the user level. Updates are provided in the December 2, 2022 update to close the vulnerability. However, it looks like the information is still accessible for administrator accounts.
[German]Microsoft's developers have implemented a bug in the new Windows 11 version 22H2 (and also in Windows 11 21H2), which will prevent administrators to use Group Policy Preferences (GPP). If you try to set up a scheduled task in the Group Policy Management Editor, you will fail with a script error. This is because a DLL with a broken script is used in the Scheduled Tasks preferences. The error also occurs in the Group Policy Management Console (GPMC).
[German]Microsoft has raised the Edge browser in the Stable Channel and Extended Stable Channel to version 108.0.1462.42 on December 5, 2022. It is a new development branch (108 version) that also fixes vulnerabilities reported by the Chromium team and already exploited in the wild.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
