Website reported as compromised? How to proceed?

Posted on 2022-08-19 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Anyone who operates a website may occasionally be confronted with the problem that it is reported as "malicious" by security portals or by users. Then the question arises how to proceed to find out if this is a false alarm or if the website has been compromised. Recently, I was asked to look at such a site that was reported as "malicious" by security tools. Afterwards I thought about documenting the steps I undertook – maybe it will help one or the other.

Continue reading →

Posted in Security | Tagged | Leave a comment

Security update for HPE Integrated Lights-Out (iLO)

Posted on 2022-08-18 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Note for administrators of HPE Proliant servers running HPE's Integrated Lights-out versions. HPE has already published a security bulleting for HPE Integrated Lights-Out 5 (iLO 5) at the end of July 2022, which pointed out several critical vulnerabilities. There is an update available for iLO 5.0, which should be installed promptly (but presumably the information has long since reached you).

Continue reading →

Posted in Security, Software, Update | Tagged , | Leave a comment

Sysinternals: Updates for Sysmon, AccessEnum, and Coreinfo

Posted on 2022-08-18 by guenni

It seems that the developers have released an updated version of the free Sysinternals tools Sysmon, AccessEnum and Coreinfo on August 16, 2022.

Continue reading →

Posted in Software, Windows | Tagged , | Leave a comment

Update KB5012170 for Secure Boot DBX causes Bitlocker issues

Posted on 2022-08-17 by guenni

Windows[English]I'll pull out one issue separately, which I had already covered in the blog with a note. The update KB5012170 released by Microsoft on August 9, 2022 causes problems on some systems. Security update for the Secure Boot Module, which is supposed to prevent vulnerability exploitation, causes some users to have the Bitlocker key requested there at boot time. Others have installation errors, and the screen remains dark for some users.

Continue reading →

Posted in issue, Update, Windows | Tagged , , | 4 Comments

Windows Server 2022 Preview Update KB5016693 (August 16, 2022)

Posted on 2022-08-17 by guenni

Windows[German]Microsoft has released an optional cumulative (preview) update KB5015879 for Windows Server 2022 as of August 16, 2022 (C-Week). Below I provide an overview regarding these updates for Windows Server 2022.

Continue reading →

Posted in Update, Windows | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Chrome 104.0.5112.101/102 fixes 11 vulnerabilities

Posted on 2022-08-17 by guenni

Chrome[German]Google has released the update of Google Chrome 104.0.5112.101 for Linux and macOS and 104.0.5112.102 for Windows on the desktop in the stable channel on August 16, 2022. The security update closes numerous vulnerabilities.

Continue reading →

Posted in browser, Security, Update | Tagged | Leave a comment

RDS issues after Windows update KB5015808

Posted on 2022-08-17 by guenni

Windows[German]I am posting an issue here on the blog that was reported recently to me by a blog reader. He is experiencing massive issues with his Server 2016 based RDS infrastructure after installing update KB5015808 (for Windows 10 version 1607 Enterprise LTSC and Windows Server 2016). So far there is not really anything to be found on the Internet.

Continue reading →

Posted in issue, Update, Windows | Tagged , , , | 13 Comments

Windows Defender Credential Guard Update and Revisions (August 9, and 15, 2022)

Posted on 2022-08-16 by guenni

Update[German]Microsoft also patched Windows Defender Credential Guard on patchday, August 9, 2022, with the security updates. Both an elevation of privilege vulnerability and a security feature bypass vulnerability were closed. However, Microsoft had not provided any documentation on this.

Continue reading →

Posted in Security, Update, Windows | Tagged , , | Leave a comment

Signal victim of Twilio hack

Posted on 2022-08-16 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]In the article Twilio data security incident findings after SMS phishing attack, I had reported on the security incident at provider Twilio, where data was stolen by hackers through a phishing attack. Twilio offers programmable voice, text, chat, video and email APIs, and cloud authentication service Authy is also part of it. Now it has been revealed that messenger service Signal is one of Twilio's customers and has also been affected.

Continue reading →

Posted in Security | Tagged | Leave a comment

Windows: "Service host: Local system" runs with high CPU/disk load after boot since update

Posted on 2022-08-16 by guenni

Windows[German]German blog reader Willi B. contacted me by mail the days because he ran into a problem under Windows 8.1. Since one of the last updates he has the problem that the service "Service Host: Local System" runs with high load after boot since for some time. The problem repeats itself with the August 2022 update. The problem has been running through Windows for years.

Continue reading →

Posted in issue, Update, Windows | Tagged , , | 1 Comment