She was the number 2 behind Marc Zuckerberg, the Facebook manager Sheryl Sandberg. After 14 years in the service of this social media company, Sandberg now announced that she is stepping down and leaving the company.
[German]The ACROS Security team around founder Mitja Kolsek has released a micro-patch to close the 0-click Microsoft Diagnostic Tool remote code vulnerability (CVE-2022-30190, Follina). The micro-patch is available for all customers with Windows and the 0patch agent free license. Here is some information about it.
[German]Since the weekend, a new Windows vulnerability CVE-2022-30190 in combination with Microsoft Office has been knows under the name Follina. In the meantime, the US CISA and also the BSI have warned about this vulnerability – while security researchers have observed the first attacks via this 0-day vulnerability by Chinese APTs. Meanwhile, it is also clear that this attack works without Microsoft Office. The CVE-2022-30190 vulnerabilities could become the next big thing in security if anti-virus solutions also detect infected documents. Here's an overview of the latest findings.
[German]The Android banking Trojan Flubot caused major damage to victims on Android systems since 2021. The last major campaign was reported a few days ago. Now Europol seems to have managed to shut down the infrastructure of the Flubot Android Trojan. Whether this will stop the business model is another matter.
[German]Quick question for administrators in the enterprise environment who manage Microsoft 365 licenses (volume licenses, E3/E5). Are you currently experiencing problems with Windows Pro systems no longer activating or losing activation? I have received indications from the readership regarding this issue – and it is probably not an isolated case – may be a certificate issue.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]In addition to the Firefox developers providing a security update for the Firefox browser (see Firefox 101.0 and 91.10esr released – with security fixes), these critical vulnerabilities in the Thunderbird email client have also been fixed with the May 31, 2022 update to version 91.10.0.
[German]Mozilla developers have released versions 101.0 and 91.10esr of the Firefox browser on May 31, 2022. These are maintenance updates, which fix bugs critical vulnerabilities.
[German]Microsoft has published a security advisory on May 31, 2022, to point out various closed vulnerabilities in the Chromium Edge browser. At the end of the month, Edge version 102.0.1245.30 was released to fix 24 vulnerabilities.
[German]I'll just bring up a topic that has been bumming around here since Monday, May 30, 2022, due to reader requests. Microsoft Outlook users seem to have the problem that one of the latest updates from May 2022 has corrupted the ability to display HTML mail. Only text or a blank mail can be displayed. Below is a brief overview.
[German]A new attack vector has been known since the weekend that abuses the Microsoft Support Diagnostics Utility via the ms-msdt: protocol to download and abuse malicious Word documents (or Excel spreadsheets) from the web. Microsoft has since issued a support document for CVE-2022-30190. I have summarized the latest state of knowledge.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
