TLStorm 2.0: 5 critical vulnerabilities in network switches from Aruba and Avaya

Posted on 2022-05-06 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Network switches from Aruba and Avaya are vulnerable to RCE attacks due to 5 vulnerabilities. Security researchers from Armis, a company specializing in networked devices, who discovered the vulnerabilities call them "TLStorm 2.0" – because there was already the TLStorm case (I had published this article TLStorm: 3 critical 0-day vulnerabilities put APC Smart UPS at risk on the original discovery of the TLStorm vulnerability in smart UPS units).

Continue reading →

Posted in devices, Security | Tagged , | Leave a comment

Chrome v101.0.4951.54 caused certificate errors

Posted on 2022-05-06 by guenni

[German]Google has released the Google Chrome 101.0.4951.54 update for Windows and Mac on the desktop in the Stable Channel as of May 2, 2022 (see Chrome 101.0.4951.54 fixes GPO bug). This build does fix the Group Policy issue (see comments on the post Chrome 101.0.4951.41 fixes 30 Vulnerabilities – but has a GPO bug). But version 101.0.4951.54 has a problem with some certificates. Users got an ERR_CERTIFICATE_TRANSPARENCY_REQUIRE visiting some web sites. In the meantime, however, this error should be fixed now.

Continue reading →

Posted in browser, issue | Tagged , | Leave a comment

10-year-old vulnerabilities in Avast and AVG put millions of users at risk

Posted on 2022-05-05 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researchers at Sentinel One have discovered two serious vulnerabilities in Avast and AVG's security products that have been around for 10 years and put millions of users at risk. The vulnerabilities are in Avast's anti-rootkit driver (which is also used by AVG). Attackers can use the vulnerabilities to take over the Windows system.

Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Microsoft Office Updates (May 3, 2022)

Posted on 2022-05-05 by guenni

[German]On May 3, 2022 (first Tuesday of the month), Microsoft releases non-security updates for still-supported versions of Microsoft Office. This month, however, there are only updates for Microsoft Office 2016, which fixes issues in Access 2016, among others. Here is a short overview.

Continue reading →

Posted in Office, Update | Tagged , | Leave a comment

Thunderbird Version 91.9.0

Posted on 2022-05-04 by guenni

[German]The developers of the Thunderbird email client have released Thunderbird 91.9.0 as of May 3, 2022. This is a maintenance update for the 91 development branch. Thanks to Tom for pointing this out.

Continue reading →

Posted in Software, Update | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Windows 11: Preview Update KB5012643 causes issues with .NET Framework 3.5 applications

Posted on 2022-05-04 by guenni

Windows[German]The preview update KB5012643 for Windows 11, released on April 25, 2022, turns out to be a real problem bear. First there were display problems in Safe Mode, which had to be corrected by KIR. Now it turns out that the preview update also causes problems with .NET Framework 3.5 applications. Microsoft has also confirmed this in the meantime and tried to give hints on how the update can still be uninstalled.

Continue reading →

Posted in issue, Windows | Tagged , , , | Leave a comment

Chrome 101.0.4951.54 fixes GPO bug

Posted on 2022-05-04 by guenni

[German]Google has released the Google Chrome 101.0.4951.54 update for Windows and Mac on the desktop in the Stable Channel as of May 2, 2022. This version fixes the Group Policy issue (see post Chrome 101.0.4951.41 fixes 30 Vulnerabilities – but has a GPO bug). The post in question can be found on the Google blog. The Chrome version for Windows, Mac and Linux will be rolled out to systems via the automatic update feature in the next few days. One can also update the browser manually (via the menu and the About Google Chrome command). The latest build of the Chrome browser can also be downloaded here.

Posted in browser, Linux, macOS, Update, Windows | Tagged , | Leave a comment

Apple's Safari has an Outlook TokenFactoryIFrame issue (May 2022)

Posted on 2022-05-04 by guenni

[German]Apple users are currently experiencing a problem when trying to access an Outlook mailbox via OWA in Safari. A TokenFactoryIFrame is downloaded every few seconds. I think the problem has only been occurring for a few days. I've seen also users claiming this for Chrome on iPads. It seems, that Microsoft has to fix this issue.

Continue reading →

Posted in ios, issue, macOS, Office | Tagged , , , , , | 2 Comments

Intel graphics driver (as of 27.20.100.8587) has memory leak – fix (as of 30.0.101.1191) available

Posted on 2022-05-04 by guenni

Windows[German]Brief note for people who run a Windows 10 with Intel processors of the 6th to 10th generation. If sporadic system crashes occur under Windows 10 (64 bit), a faulty Intel graphics driver newer than version 27.20.100.8587 may be the cause. The graphics drivers cause a memory leak in the Desktop Windows Manager. The problem is known since 2020, if my research is not deceiving. However, there has been a fix from Intel since Dec. 2021 in the form of the Windows DCH driver 30.0.101.1191.

Continue reading →

Posted in issue, Windows | Tagged , , | Leave a comment

Firefox 100.0 and 91.9ESR released

Posted on 2022-05-04 by guenni

Mozilla[German]Mozilla developers have released versions 100.0 and 91.9esr of the Firefox browser on May 3, 2022. This is a new development branch which, according to the Security Advisory, fixes critical vulnerabilities. Thanks to 1St1 for the tip.

Continue reading →

Posted in browser, Security, Software, Update | Tagged , , | 1 Comment