[German]Another note to administrators of Microsoft Exchange Servers. Security researchers have observed a malware campaign that distributes the IcedID banking Trojan and targets Microsoft Exchange Servers that have not received all security updates. The attackers are attempting to hook into existing email threads and inject malicious payloads.
[German]Google has released updates to Google Chrome 100.0.4896.60 for Windows and Mac on the desktop in the Stable Channel on 29 March 2022. The new version only brings the 100 in the version number, but also fixes 28 security vulnerabilities, some of which are classified as high. In addition, the Android browser has been updated to version 100.0.4896.5. Here is a brief overview.
[German]Trend Micro Research has published a new blog post reporting on a new malware campaign. Purple Fox operators are using updated tools and a new arrival vector to infect their victims. They use fake copies of popular software like WhatsApp installer to trop their first stage loader.
[German]Ukrtelecom, the largest fixed-line provider in Ukraine, was crippled for hours by a cyber attack, which also affected the internet. Furthermore, Ukraine has been responsible for botnet farms designed to spread disinformation since the beginning of the war. Military intelligence also exposed 620 employees of Russia's FSB intelligence agency and a BGP hijacking attack briefly diverted Twitter traffic to Russia.
[German]A brief question for European reader about an issue, which has become almost a running joke here on the blog: Did Windows 10/Windows 11 switch correctly to European summer time (daylight saving time) on Saturday night (26/27 March 2022)? I've just come across a hint that Windows 11 might have been a bit buggy.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has released the optional cumulative (preview) update KB5011563 for Windows 11 on 28 March 2022. The remaining preview updates for Windows 10 and Windows Server were already released on 22 March 2022. However, update KB5011563 was previously tested with Windows 11 Insiders. Below I give an overview of these updates for Windows 11.
[German]This is the "best" image that the authentication service Okta is giving off right now. The Lapsus$ gang had claimed to have hacked Okta, which possible could have threatened hundreds of customers and made them victims of attacks. But it turned out to be "much ado about little". But Okta had to admit a lapse of its own: There was a misjudgement and they informed the public about the facts far too late and reacted.
[German]Brief addendum from last week. Microsoft has released version 2.0 of its administrative templates (.admx files) for Group Policy for Windows – from Windows 7 up to Windows 10 November 2021 Update (21H2) as of 22 March 2022. Windows 11/Windows Server 2022 are not supported. The templates allow administrators to manage registry-based policy settings.
Microsoft has released several revisions for security updates on 25 March 2022. The revisions address changed vulnerability assessments. Here is an uncommented overview.
[German]A security researchers have found a vulnerability CVE-2022-104 (authentication bypass) in Sophos firewalls (v18.5 MR3 and older) that allows authentication bypass. Attackers could thus take over the firewall and execute malicious code remotely. However, Sophos has since released an update for the firewall products in question.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
