[German]Trend Micro Research has published a new blog post reporting on a new malware campaign. Purple Fox operators are using updated tools and a new arrival vector to infect their victims. They use fake copies of popular software like WhatsApp installer to trop their first stage loader.
[German]Ukrtelecom, the largest fixed-line provider in Ukraine, was crippled for hours by a cyber attack, which also affected the internet. Furthermore, Ukraine has been responsible for botnet farms designed to spread disinformation since the beginning of the war. Military intelligence also exposed 620 employees of Russia's FSB intelligence agency and a BGP hijacking attack briefly diverted Twitter traffic to Russia.
[German]A brief question for European reader about an issue, which has become almost a running joke here on the blog: Did Windows 10/Windows 11 switch correctly to European summer time (daylight saving time) on Saturday night (26/27 March 2022)? I've just come across a hint that Windows 11 might have been a bit buggy.
[German]Microsoft has released the optional cumulative (preview) update KB5011563 for Windows 11 on 28 March 2022. The remaining preview updates for Windows 10 and Windows Server were already released on 22 March 2022. However, update KB5011563 was previously tested with Windows 11 Insiders. Below I give an overview of these updates for Windows 11.
[German]This is the "best" image that the authentication service Okta is giving off right now. The Lapsus$ gang had claimed to have hacked Okta, which possible could have threatened hundreds of customers and made them victims of attacks. But it turned out to be "much ado about little". But Okta had to admit a lapse of its own: There was a misjudgement and they informed the public about the facts far too late and reacted.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Brief addendum from last week. Microsoft has released version 2.0 of its administrative templates (.admx files) for Group Policy for Windows – from Windows 7 up to Windows 10 November 2021 Update (21H2) as of 22 March 2022. Windows 11/Windows Server 2022 are not supported. The templates allow administrators to manage registry-based policy settings.
Microsoft has released several revisions for security updates on 25 March 2022. The revisions address changed vulnerability assessments. Here is an uncommented overview.
[German]A security researchers have found a vulnerability CVE-2022-104 (authentication bypass) in Sophos firewalls (v18.5 MR3 and older) that allows authentication bypass. Attackers could thus take over the firewall and execute malicious code remotely. However, Sophos has since released an update for the firewall products in question.
[German]A security researcher has recently introduced a technique to make intercepting credentials via phishing even more efficient. He calls the technique BitB, short for "browser in the browser". A fake browser window is displayed within a real login page in order to fake an OAuth login page. This allows login data to be tapped without the user being aware of it.
[English]Another short addendum from this week on a topic that should hardly concern anyone. Microsoft has admitted that the "Backup and Restore" function known from Windows 7 for saving and restoring backups is now simply broken in Windows 10 and Windows 11. This has been the case since January 2022, when an update broke the function.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
