Security: When a (fake) "Office 365 package" suddenly arrives by mail

Posted on 2022-08-21 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A small warning, which is mainly directed at inexperienced readers of this blog or users. Criminals seem to send packages to (mainly elderly people), which allegedly contain a Microsoft Office. However, the USB stick included in the package does not install Microsoft Office. Rather, malicious software is installed, which prompts the user to visit a fake support page. There, it asks the user to grant remote access to the system – the aim is probably to get credit card or bank details in order to rip off the victims.

Continue reading →

Posted in Security | Tagged , | Leave a comment

CVE-2022-38392: Janet Jackson song and crashing Windows XP notebooks

Posted on 2022-08-20 by guenni

[German]It's a bizarre story that Microsoft developer Raymond Chen recently made public: Notebooks with Windows XP crashed when the pop song Rhythm Nation  by Janet Jackson from 1989 was played. The background was that the hard disks used resonated and caused the crashes due to read/write errors. There is now even a CVE number CVE-2022-38392 for this issue.

Continue reading →

Posted in devices, issue | Tagged , | 1 Comment

Security researcher warns: VPNs on iOS are not private

Posted on 2022-08-20 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researchers Michael Horowitz warns iOS users, that VPNs on this platform is broken. It looks, that it works fine. But the iOS device gets a new public IP address and new DNS servers. A detailed inspection of data leaving the iOS device by Horowitz shows that the VPN tunnel leaks. This became firstly know by ProtonVPN, according to Horowitz, in March 2020 and iOS v13 (I found this reddit.com post from 2018, claiming a similar behavior).

Continue reading →

Posted in Security | Tagged | Leave a comment

LibreOffice 7.4 released

Posted on 2022-08-20 by guenni

The developers of LibreOffice have released version 7.4 of this office package this week. Numerous innovations and improvements have been made to the individual Office modules, which can be read in the release notes. The package can be downloaded free of charge from this LibreOffice website.  (via)

Posted in Software | Tagged | Leave a comment

Website reported as compromised? How to proceed?

Posted on 2022-08-19 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Anyone who operates a website may occasionally be confronted with the problem that it is reported as "malicious" by security portals or by users. Then the question arises how to proceed to find out if this is a false alarm or if the website has been compromised. Recently, I was asked to look at such a site that was reported as "malicious" by security tools. Afterwards I thought about documenting the steps I undertook – maybe it will help one or the other.

Continue reading →

Posted in Security | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Security update for HPE Integrated Lights-Out (iLO)

Posted on 2022-08-18 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Note for administrators of HPE Proliant servers running HPE's Integrated Lights-out versions. HPE has already published a security bulleting for HPE Integrated Lights-Out 5 (iLO 5) at the end of July 2022, which pointed out several critical vulnerabilities. There is an update available for iLO 5.0, which should be installed promptly (but presumably the information has long since reached you).

Continue reading →

Posted in Security, Software, Update | Tagged , | Leave a comment

Sysinternals: Updates for Sysmon, AccessEnum, and Coreinfo

Posted on 2022-08-18 by guenni

It seems that the developers have released an updated version of the free Sysinternals tools Sysmon, AccessEnum and Coreinfo on August 16, 2022.

Continue reading →

Posted in Software, Windows | Tagged , | Leave a comment

Update KB5012170 for Secure Boot DBX causes Bitlocker issues

Posted on 2022-08-17 by guenni

Windows[English]I'll pull out one issue separately, which I had already covered in the blog with a note. The update KB5012170 released by Microsoft on August 9, 2022 causes problems on some systems. Security update for the Secure Boot Module, which is supposed to prevent vulnerability exploitation, causes some users to have the Bitlocker key requested there at boot time. Others have installation errors, and the screen remains dark for some users.

Continue reading →

Posted in issue, Update, Windows | Tagged , , | 4 Comments

Windows Server 2022 Preview Update KB5016693 (August 16, 2022)

Posted on 2022-08-17 by guenni

Windows[German]Microsoft has released an optional cumulative (preview) update KB5015879 for Windows Server 2022 as of August 16, 2022 (C-Week). Below I provide an overview regarding these updates for Windows Server 2022.

Continue reading →

Posted in Update, Windows | Tagged , | Leave a comment

Chrome 104.0.5112.101/102 fixes 11 vulnerabilities

Posted on 2022-08-17 by guenni

Chrome[German]Google has released the update of Google Chrome 104.0.5112.101 for Linux and macOS and 104.0.5112.102 for Windows on the desktop in the stable channel on August 16, 2022. The security update closes numerous vulnerabilities.

Continue reading →

Posted in browser, Security, Update | Tagged | Leave a comment