German Cyber Guard BSI warns now against the use of Kaspersky antivirus products

Posted on 2022-03-15 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Can antivirus products from the Russian based company Kaspersky be used in companies and government agencies without risk? After Russia's invasion of Ukraine, this question has becomehot. After hesitating for some time, the German Federal Office for Information Security (BSI) has now issued a recommendation. In short, the BSI recommends replacing applications from the Kaspersky anti-virus software portfolio with alternative products.

Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Firefox 98.01 and ESR91.7.1 released

Posted on 2022-03-15 by guenni

Mozilla[German]Mozilla Mozilla developers released versions 98.01 and ESR91.7.1 of the Firefox browser on March 14, 2022. This is a maintenance update which, according to the release notes this updates removes Yandex and Mail.ru as optional search providers from the drop-down search menu in Firefox. Thanks to deoroller for pointing this out. The new Firefox and the ESR variants can be downloaded from this website for various platforms (the variant is to be selected via the displayed list boxes).   

Posted in browser, Update | Tagged | Leave a comment

Electron Bot: Malware in Microsoft Store infects over 5,000 machines

Posted on 2022-03-15 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security vendor Check Point has come across a new type of malware that enables a complete takeover of systems through a backdoor. In addition, the malware can take control of social media accounts from Facebook, Google and Sound Cloud. The malware was spread via games offered for download in the official Microsoft Store. And the tragic thing is that virus scanners like Microsoft Defender did not detect this malware.

Continue reading →

Posted in Security, Software, Windows | Tagged , , , , | Leave a comment

iOS and iPadOS 15.4 and macOS 12.3 released

Posted on 2022-03-15 by guenni

[German]Apple has released an update to iOS and iPadOS 15.4 as well as macOS 12.3 on March 14, 2022. On the iPhone, Face ID is supported with the mouth-nose mask on. Here is brief overview of these updates.

Continue reading →

Posted in ios, macOS, Security, Update | Tagged , , | 2 Comments

Device Reboot bricks Zyxel USG FLEX / ATP Series Firewalls (March 2022)

Posted on 2022-03-15 by guenni

[German]The manufacturer Zyxel seems to have a problem with Zyxel USG FLEX / ATP Series Firewalls. With a certain firmware, the Zyxel USG FLEX / ATP Series Firewall can no longer boot successfully and hangs. The manufacturer warns about the configuration and is working on a firmware update that fixes this problem.

Continue reading →

Posted in devices, issue | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Critical vulnerabilities in Veeam Backup & Replication

Posted on 2022-03-14 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Veeam has issued a security alert warning of critical vulnerabilities in Veeam Backup & Replication. Attackers could use these vulnerabilities to take over systems running Linux or Windows. German blog reader der Seb posted the links to the relevant Veeam security alerts kb4288, kb4289 und kb4290 in this comment (thanks for that). The support posts in question have the updates to fix the vulnerabilities with download links as well as further notes on the vulnerabilities.

Posted in Security, Software, Update | Tagged , , | Leave a comment

McAfee Total Protection Update fixes CVE-2022-0280

Posted on 2022-03-14 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]McAfee has released a security alert and update for McAfee Total Protection. The update fixes the CVE-2022-0280 vulnerability, which is rated high. A vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to version 16.0.43 that allows a local user to escalate their privileges and delete arbitrary files. This could result in sensitive files being deleted and potentially cause a denial of service. This attack exploits the way symlinks are created and how the product works with them. Details can be found in the security alert dated 7/3/2022.  (via)

Posted in Security, Software, Update | Tagged , , , | Leave a comment

Anonymous hacked German subsidery of russian energy gigant Rosneft, 20 terabytes of data extracted

Posted on 2022-03-14 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Activists of the hacker collective Anonymous have announced actions against Russian companies after the Russian army invaded Ukraine. According to media reports and an article on Anonleaks, members of Anonymous successfully hacked the German branch of the Russian energy giant Rosneft. In the hack, 20 terabytes of data were siphoned off before the hack was discovered and further access was prevented.

Continue reading →

Posted in Security | Tagged , | Leave a comment

Beware: User reports TP-Link routers share traffic with third parties (Avira)

Posted on 2022-03-14 by guenni

Stop - Pixabay[German]Do any of you have TP-Link routers in use? There is disturbing information of the "hands off these devices" type. This is because there are user reports that TP-Link router firmware is sharing network traffic with third-party vendors (specifically AVIRA via HomeShield). Blog reader Marcel alerted me to the issue on Facebook (thanks for that) and I came across several reports on the subject. The background is cloud integrations with certain AVIRA features implemented as part of a partnership between TP-Link and AVIRA. The whole thing could mean trouble for TP-Link – and can put companies or people in the home office in a lot of trouble – there is, after all, a GDPR violation.

Continue reading →

Posted in devices, Security | Tagged , , , | 2 Comments

Cybersecurity in ICS, IoT, and medical devices (as of H2 2021).

Posted on 2022-03-13 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The number of publicly disclosed vulnerabilities affecting medical devices, industrial control systems (ICS) or the extended Internet of Things (XIoT) is continuously increasing. In the last four years, the number of disclosed vulnerabilities in industrial control systems (ICS) has more than doubled (up 110%). In the second half of 2021 alone, the number increased by 25 percent compared to the previous six months. This is according to a corresponding report by security provider Claroty.

Continue reading →

Posted in Security | Tagged | Leave a comment