[German]Many users manage their passwords in password managers. Security researchers took a closer look at 11 popular extensions (1Password, LastPass, iCloud, and others). These were identified as vulnerable, putting login details, 2FA codes, and credit card data at risk.
Continue reading
[German]Some companies subject their employees to internal phishing training involving simulated attacks. A study has now shown that these phishing simulations are largely useless. But even secure email gateways cannot stop phishing emails.
[German]On August 14, 2025, Oracle's developers released Virtualbox version 7.2. This version is a maintenance update for bug fixes.
Continue reading
[German]Anyone who believed that Microsoft's Recall was at the forefront of surveillance needs to think again. Security researchers have discovered the FreeVPN.One extension for the Google Chrome browser. This extension took screenshots of all visited pages and collected additional data. The extension has now been removed from the Google Chrome Store.
[German]Another small finding from the Internet that may be helpful for administrators who work with AppLocker in corporate environments to set application restrictions. The AppLocker Policy Generator promises to support system administrators and security experts in creating and managing AppLocker policies.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Teir China connections seem to have once again "come back to haunt" at Microsoft. I have come across reports that Microsoft no longer grants security researchers from China early access to zero-day vulnerabilities or proof-of-concept (PoC) exploits. The SharePoint incident involving hacks by Chinese groups casts a shadow over the future.
[German]A brief update from this week: On August 20, 2025, Apple released updates for iOS and iPadOS that address critical vulnerabilities in the operating systems. Here is some information.
Quick note for LibreOffice users: The developers released LibreOffice 25.8 on August 20, 2025. The new version is supposed to be faster, more compatible with Microsoft Office, and supports PDF 2.0.
[German]All supported versions of Windows (clients and servers) contained a certificate spoofing vulnerability (CVE-2025-55229) – already fixed in May 2025. On August 21, 2025 updated the support article and listed updates to fix the issue. On August 21, 2025, the RCE vulnerability CVE-2025-55230 in MBT drivers became known. However, I am currently only finding broken links on both of Microsoft's security articles.
[German]Noch ein kleiner Nachtrag vom August 2025 Patchday. Das kumulative Update KB5063878 für Windows 11 24H2 oder das Update-Pendant für Windows 10 21H2-22H4 verursachen Leistungsprobleme beim NDI-Streaming. Microsoft hat es zum 21. August bestätigt, Blog-Leser hatten ebenfalls darauf hingewiesen. Es bleibt nur ein Workaround bis zur Korrektur.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
