[German]Interesting report from the Wall Street Journal regarding the Russian antivirus provider Kaspersky. The proposal from the White House to sanction Russian security vendor Kaspersky over the invasion of Ukraine is dividing the Biden administration. Some members of the staff fear that sanctioning Kaspersky Lab could increase the risk of a Russian cyber attack. The background is that Kaspersky products are still widely used.
[German]Apple has released two security updates for macOS 12.3.1 (Monterey) and iOS/iPad OS 15.4.1. These patches close vulnerabilities CVE-2022-22675 (in AppleAVD for iOS and macOS) and CVE-2022-22674 in the macOS Intel graphics driver. Apple has received reports that the vulnerabilities are already being actively exploited. Details can be found in the linked articles. Arstechnica has published this article on the topic.
[German]This is a cool thing that Microsoft and the Linux developer community around Linus Torvalds are planning for the future. Up to now, Microsoft's developers have been tinkering with a Windows Subsystem for Linux (WSL) in Windows, so that the poor Windows users were allowed to practice a bit of Linux in a console. Linux will eventually get a clean Windows subsystem so that Linux users will finally be able to use Windows 32 applications without any problems.
[German]Indiscreet question to the readers of this blog: Do you still have an overview of exactly what Microsoft is currently doing with its Defender? I confess that I got lost a long time ago and get confused when blogging because Windows Defender still slips into my texts instead of Microsoft Defender for Endpoint (I hope that's still correct). I have just come across a cheat sheet helping to survive the jungle of Microsoft Defender terms.
[German]Microsoft is working on improving the protection of the current versions of Windows 10, Windows 11 and Windows Server 2016 and their successors against harmful drivers. For this purpose, Windows Defender Application Control (only available in Enterprise editions) or HVCI or the S-Mode will support a driver block list with which the execution of drivers can be controlled and, if necessary, prevented.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Security researchers from Bitdefender are drawing attention to vulnerabilities they have discovered in the firmware of Wyze CAM IP video cameras. According to Bitdefender, attackers can bypass the authentication process, gain complete control over the device and read information and configuration data from the camera's SD card or install malicious code. The gap can be closed with an update starting with the Wyze Cam V2. However, patching is not possible for the first version of the camera.
[German]motionEyeOS is a Linux distribution that turns your single-board computer into a video surveillance system. However, the developer of motionEyeOS can no longer actively work on this project for personal reasons, as he writes. If anyone is interested in taking on the project, they should contact the developer.
Today, 31 March 2022, is World Backup Day again – a good time to think about what an effective data backup strategy needs to do. A lot has changed in recent years! More and more data is hosted in the cloud, ransomware is one of the biggest threats to data today.
Microsoft has sent a security alert by mail as of 30 March 2022, with a warning about a the vulnerability CVE-2022-23278. This is a spoofing vulnerability in Microsoft Defender for Endpoint, which has already been closed in Android and iOS as of 8 March 2022. As of 30 March, Microsoft advises users to ensure devices have received the latest update.
[German]Another note to administrators of Microsoft Exchange Servers. Security researchers have observed a malware campaign that distributes the IcedID banking Trojan and targets Microsoft Exchange Servers that have not received all security updates. The attackers are attempting to hook into existing email threads and inject malicious payloads.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
