Born's Tech and Windows World

[German]In a few hours, we will have left 2021 behind us and find ourselves at the beginning of 2022. 2021 was marked by many security incidents and successful cyberattacks as well as ransomware infections. What cyber enterprises need to do to be prepared for cyber threats in 2022? Michael Sentonas, chief technology officer at CrowdStrike, has compiled five cybersecurity predictions for 2022, which I publish below for your information.

Continue reading →

[German]Norwegian publishing group Amedia has been the victim of a cyber attack. As a result of this attack (I assume Ramsomware), newspapers could no longer be published in paper form and advertisements were also no longer placed – the systems concerned are completely down. Here is a rough overview of what is known.

Continue reading →

[German]Is there a problem with the password management solution LastPass? LastPass users fear compromised master passwords. They received email alerts that someone tried to log into their accounts from unknown locations. This could indicate a larger security issue. In any case, LastPass users should change their master password as a precaution and enable two-factor authentication for the service.

Continue reading →

[German]It looks like the big wave of hacks via the log4j vulnerability failed to materialize over Christmas. But there are cases, like at the Belgian Ministry of Defense, which were attacked via log4j. However, the attacks will possibly follow in January 2022. Microsoft has created a status indicator for Defender 365 that lists vulnerable devices on a network. Here is a brief overview of the information as of Dec. 28, 2021.

Continue reading →

[German]Owners of QNAP NAS drives that are accessible via the Internet were attacked by the eCh0raix ransomware in a new campaign around Christmas. There are only a few people affected, but this malware, also known as QNAPCrypt, encrypts the devices and extorts a ransom. The ransomware is not new either, as I had warned about attacks in June 2020 (see QNAP Security Advisory about eCh0raix Ransomware).

Besitzer von QNAP-NAS-Laufwerken, die per Internet erreichbar sind, wurden rund um Weihnachten in einer neuen Kampagne von der eCh0raix-Ransomware angegriffen. Es sind zwar nur wenige Betroffene, aber diese auch als QNAPCrypt bekannte Schadsoftware verschlüsselt die Geräte und erpresst Lösegeld. Neu ist die Ransomware auch nicht, hatte ich doch im Juni 2020 vor Angriffen gewarnt (siehe QNAP Sicherheitswarnung vor eCh0raix-Ransomware).

Continue reading →