[German]The developers of the web-based password manager online service LastPass have just informed their users about a security incident. Two weeks ago, unusual procedures were detected in the LastPass development environment. Unauthorized third parties probably managed to gain access to parts of the LastPass development environment.
[German]Short addendum to an unpleasant security topic. Yesterday it became known that there was a security incident at the provider Plex (streaming service, media server). It seems that attackers managed to access some of the data of the user base of this provider. In the process, usernames, emails and the encrypted passwords might have been leaked. Plex users are urged to change their passwords for Plex access as a precaution.
[German]Security researchers found over 80,00 surveillance cameras from HikVision that are exploitable and are accessible via the Internet. Attackers could take over these systems at any time via vulnerabilities using code injection. HikVision has already published a firmware update to close this vulnerability in September 2021 – which was probably not installed everywhere.
Small addendum from last week. Microsoft has published revisions of various security messages, which I post below for your information.
[German]Oracle has facing a class action lawsuit , filed last week in the Northern District of California. Activists accuse Oracle of operating a "global surveillance machine" and violating the basic privacy rights of hundreds of millions of people. At issue, it seems, is data collection for advertising purposes.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Small addendum and summary of two issues with which Microsoft is currently annoying users of Microsoft Outlook. First, users of the Outlook app for Android and iOS receive ads for Office 365. In addition, there is quite a bit of resentment brewing among Outlook users about a layout change in the Windows app. The issues have been bubbling along for a few days now.
[German]VMware users running Carbon Black Cloud Sensor version 3.6.0.1979 – 3.8.0.398 were greeted with blue screens on their Windows systems as of August 23, 2022. The cause is an update for Carbon Black Sensor 3.7.0.1253, which is responsible for this behavior.
[German]Mozilla's developers have released the versions 104.0.0, 102.2 ESR and 91.13 ESR of the Firefox browser on August 23, 2022. The ESR versions are maintenance updates that are supposed to fix bugs. Firefox 104 is a new development branch.
[German]Brief note for blog readers who happen to be customers of the autodoc.de platform (sells spare parts for vehicles). There was a successful cyber attack at this provider, in which personal data of the central customer management software may have been viewed and possibly also copied. The company has informed its customers, as a blog reader told me.
[German]The developers of Thunderbird have released an update of the email client to version 102.2.0 as of August 23, 2022 (thanks to Tom for pointing this out). However, there is feedback from readers that the new version (especially when upgrading from the 91 version) is causing problems.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
