Malware trend August 2022: Emotet no more #1

Posted on 2022-09-28 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]CheckPoint has released its Global Threat Index for August 2022, a top list of malware infections. Surprisingly for me, the previously frequently mentioned Emotet ransomware has been displaced from the top spot it held in previous months. Now, a malware called FormBook is in the No. 1 spot, followed by AgentTesla, the latter being no stranger either. Here is some information on the threat landscape provided to me by CheckPoint.

Continue reading →

Posted in Security | Tagged | Leave a comment

Windows 11 22H2: Out-of-band update KB5019311 (Sept. 27, 2022)

Posted on 2022-09-28 by guenni

Windows[German]Microsoft has released an out-of-band update KB5019311 on September 27, 2022, for Windows 11, version 22H2. This update is supposed to fix localization issues in the setup files. Thouse issues have been detected in non English versions of Windows 11 22H2.

Continue reading →

Posted in Update, Windows | Tagged , , , | Leave a comment

HP printers: Critical vulnerability (Sept. 2022)

Posted on 2022-09-27 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]HP has published a warning about a buffer overflow vulnerability in the firmware of various printer models (Inkjet, Laserjet Pro and HP PageWide Pro printers) on September 21, 2022. One vulnerability even potentially allows remote code execution (RCE). Firmware updates for the affected printer models are now available.

Continue reading →

Posted in devices, Security | Tagged , | 1 Comment

Windows batch files: Strange behavior of the IF command

Posted on 2022-09-27 by guenni

Windows[German]German blog reader Frank contacted me about a problem on Windows that I don't really have an explanation for. Originally it was about the IF command in batch files returning wrong values when comparing. So Frank tested the whole thing with PowerShell and found something similar there. Only a test program written with VB .NET delivered the expected results. Since the batch program also delivers the same, incorrect, results under Windows 7, I assume that Frank and I have overlooked something. I'll post the problem here in the blog – maybe a reader will notice something.

Continue reading →

Posted in Windows | Tagged | Leave a comment

Sophos XG Firewall: RCE vulnerability (CVE-2022-3236)

Posted on 2022-09-26 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Vendor Sophos warns about a remote code execution vulnerability in its firewall. There is a code injection vulnerability in the Sophos XG Firewall user portal and web admin (UTM products not affected). This vulnerability is already being exploited in a limited number of cases in Asia. An update is available to close the vulnerability.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

WhatsApp: Two vulnerabilities allow remote code execution

Posted on 2022-09-26 by guenni

[German]Meta subsidiary WhatsApp warns about two vulnerabilities in its apps for Android and iOS that put users' security at risk. Both vulnerabilities allow remote code execution – so the apps should be updated promptly.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Windows 11 22H2: Issues and upgrade stoppers

Posted on 2022-09-25 by guenni

Windows[German]The upgrade to Windows 11 version 22H2, which was released on September 20, 2022, doesn't seem to be a no-brainer at all. Users who have upgraded to the version are complaining about bugs – and some features like tabs in Windows Explorer won't come until October via the "Moments 1" update. Gamers are complaining about bugs, and Microsoft has already had to admit to an upgrade block on certain versions of the Intel Smart Sound Technology driver. Unofficially, there also seems to be an upgrade blocker to version 22H2 on the Microsoft IPP Class Driver.

Continue reading →

Posted in issue, Windows | Tagged , | Leave a comment

Windows 11 strengthens SMB traffic protection

Posted on 2022-09-25 by guenni

Windows[German]Microsoft is starting to improve protection for the SMB protocol in Windows 11. Thus, Microsoft has introduced a delay between SMB authentications in Windows 11 (in Insider Previews). This is intended to prevent spying on SMB traffic. There is also protection against SMB monitoring. Microsoft has published a couple of blog posts about the protections that have been put in place.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Toner & ink subscription Brother EcoPro on the start

Posted on 2022-09-25 by guenni

[German]The printer manufacturer Brother is also trying a subscription model for inks and toners – similar to HP. The whole thing is currently being tested in France, and Germany will follow at some point.

Continue reading →

Posted in devices | Tagged | Leave a comment

Windows 10/11: Strange issues since August 2022 updates

Posted on 2022-09-25 by guenni

Windows[German]German blog reader Henning contacted me via email because he has been experiencing Windows 10 and Windows 11 issues on several machines since the August 2022 updates. Four identical systems running Windows 10 or Windows 11 have been experiencing startup issues since installing the August 2022 updates. The machines are stuck at 30% of the installation after a reboot. I put the description in the blog – maybe there are more affected or someone knows a solution.

Continue reading →

Posted in browser | Tagged , , , | Leave a comment