Windows 0-day (Mark of the Web) used for ransomware attacks via JavaScript

Posted on 2022-10-27 by guenni

Windows[English]The days I had reported about an unfixed 0-day vulnerability, Mark of th e Web (MOTOW), in Windows for which there is an unofficial fix. Now a report has come to my attention that a 0-day vulnerability in this area can be exploited by cybercriminals via JavaScript to bypass web security alerts and disguise ransomware attacks. The background is that a bug in Windows 10 prevents Windows' SmartScreen filter from kicking in when an invalid digital signature is present.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Chrome 107.0.5304.62/63/68 released

Posted on 2022-10-26 by guenni

Chrome[German]Google has released the update of Google Chrome to the 107 branch in the stable channel for Mac (107.0.5304.62), Linux (107.0.5304.68) and Windows (107.0.5304.62/63) on October 25, 2022. It is a new development branch, but it also fixes bugs and vulnerabilities.

Continue reading →

Posted in browser, Linux, macOS, Security, Software, Update, Windows | Tagged | Leave a comment

Facebook tracking pixel causes data leak at US health care system, 3 million patients affected

Posted on 2022-10-26 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A new case from a US healthcare platform showing how critical tracking pixels from social media platforms can be. Advocate Aurora Health, a large nonprofit operator of healthcare facilities in the Midwestern U.S., had to inform its patients that sensitive data may have been leaked through the use of meta-counting pixels in its own websites and online services.

Continue reading →

Posted in Security | Tagged , | Leave a comment

WhatsApp, Signal, Threema: Timing attack reveals user location

Posted on 2022-10-26 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researchers have identified a vulnerability that undermines the location data of users of WhatsApp, Signal and Threema. In a blog post, the security researchers present the results of the research and offer potential solutions to mitigate the attack vector. The operators of the messengers are investigating the problem, but Threema questions the practical exploitability in principle due to restrictions.

Continue reading →

Posted in Security | Tagged | Leave a comment

AMA Delivery Optimization & Connected Cache on October 27, 2022

Posted on 2022-10-26 by guenni

Microsoft plans to hold an "Ask me anything" session on Delivery Optimization & Connected Cache on October 27, 2022. The team behind Delivery Optimization and Microsoft Connected Cache wants to provide answers to questions.

Continue reading →

Posted in General | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Windows 7/8.1: Google ends support in February 2023, Edge also affected

Posted on 2022-10-25 by guenni

[German]The support of the Chrome browser is to be discontinued for Windows 7 SP1 and Windows 8.1 from February 2023. The Google developers are reacting to the fact that ESU support for Windows 7 SP1 will end in January 2023. And Windows 8.1 will also receive security updates for the last time in January 2023 and will fall out of support in February 2023. Microsoft's Edge browser is also affected Continue reading →

Posted in browser, Security, Software, Windows | Tagged , , , , | 9 Comments

European Union decided on USB C charging cable as a standard

Posted on 2022-10-25 by guenni

[German]The common European standard for charging cables for mobile devices, which is based on the USB-C interface, has been decided and can now come. Following the overwhelming approval of the European Parliament on October 4, 2022, the Council of EU member states gave its consent on October 24, 2022. New devices in the EU will have to be equipped with this interface by 2026 at the latest, but the standard will already apply from 2024.

Continue reading →

Posted in devices | Tagged | Leave a comment

WhatsApp: Worldwide down for some users (Oct. 25, 2022)

Posted on 2022-10-25 by guenni

[German]If you're a user of the WhatsApp messenger service and nothing is working right now, it's not because of your device or your account. Meta subsidiary WhatsApp is likely to experience a worldwide outage of its Messenger service today, October 25, 2022.

Continue reading →

Posted in issue, Software | Tagged | Leave a comment

iOS 16.1 and iPadOS 16 released

Posted on 2022-10-25 by guenni

[German]As expected, Apple has released its iOS 16.1 for iPhones and iPadOS 16 for iPads on October 24, 2022. This means that compatible devices can be updated to iOS 16.x or its counterpart iPadOS 16.x. The release of iPadOS had been somewhat delayed (see Apple event on Sept. 7, 2022, iPhone 14 unveiling? iPadOS 16.1 comes after iOS 16).

Continue reading →

Posted in ios, Update | Tagged | Leave a comment

Windows 11 22H2: Troubleshooter for upgrade blocker "printer driver" released (Oct. 21, 2022)

Posted on 2022-10-25 by guenni

Windows[German]Microsoft has released a troubleshooter to fix printer issues last Friday (October 21, 2022). This troubleshooter helps against the compatibility issues with the drivers of certain printers on Windows 11 21H2 and 22H2 confirmed at the end of September 2022. This can result in the printers only being able to be used with default printing options. Microsoft has blocked the feature update to Windows 11 version 22H2 on the affected systems.

Continue reading →

Posted in issue, Windows | Tagged , , | Leave a comment