Amazon Alexa: 25% of buyers use it only one week …

Posted on 2021-12-26 by guenni

Stop - Pixabay[German]Did you also get such an Alexa part from Amazon as a Christmas present? I avoid this stuff like the devil avoids holy water for data protection reasons – and I don't see the point yet. But devices with the Alexa voice assistant have been bought en masse every year since 2015. It's a popular gift when you can't think of anything else. Internal documents from Amazon show that 25 percent of users no longer use the device after a week.

Continue reading →

Posted in devices | Tagged , | Leave a comment

Merry Christmas …

Posted on 2021-12-25 by guenni

to all my blog readers.

Posted in General | Tagged | Leave a comment

Scam: "See who visits your Facebook profile"

Posted on 2021-12-25 by guenni

[German]Today, another security topic that comes to my attention quite often on Facebook. One of the people in my Facebook friends list tells me a few days ago, that I've been tagged and that I can find out who visited my profile. Not that I would be particularly interested in this. But behind this approach is a nasty phishing scam.

Continue reading →

Posted in General | Leave a comment

It seems it's Christmas …

Posted on 2021-12-24 by guenni

Just realized that it must be Christmas again – at least all the doors in the advent calendar are all open. Everywhere people are preparing for the holidays …

Continue reading →

Posted in General | Tagged | Leave a comment

Ransomware attack on French IT service provider Inetum

Posted on 2021-12-24 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]As of Sunday, December 19, 2021, there appears to have been a successful cyberattack using ransomware against French IT services provider Inetum. The attack affected the group's IT functions in France, but not in other countries, the company wrote. With 2 billion euros in annual revenue and 19,000 employees (2018), that's already one of the big ones in the industry.

Continue reading →

Posted in Security | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

0patch fixes ms-officecmd RCE vulnerability in Windows

Posted on 2021-12-24 by guenni

Windows[German]The security team of ACROS Security around founder Mitja Kolsek has just developed a micro patch to close a remote code execution vulnerability in the ms-officecmd handler of Windows and released it for customers with a 0patch PRO or Enterprise license. There is no CVE for this vulnerability yet. Here is some information about it.

Continue reading →

Posted in Security, Windows | Tagged , , | Leave a comment

Windows 10 Version 21H2 Security Baseline

Posted on 2021-12-23 by guenni

Windows[German]Microsoft has updated the so-called Security Baseline (a tool for security administrators in companies) for Windows 10 version 21H2 and released it generally. In the current version, not only the latest Windows 10 version is supported. There are also special guidelines for printing or protection against ransomware. Here is a brief overview.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Microsoft Teams Bugs: Blocks Emergency calls, unpatched phishing vulnerability since March 2021

Posted on 2021-12-23 by guenni

Teams[German]Another collective article on Microsoft Teams, which is widely used, but has a somewhat idiosyncratic implementation and above all is teeming with bugs and attracts negative attention in this regard every now and then. Today on offer: Since March 2021, Microsoft has been aware of four vulnerabilities in Teams that allow phishing via the link preview. And on Android, it can happen that Microsoft Teams blocks emergency calls. Here's a quick overview.

Continue reading →

Posted in issue, Security, Software | Tagged , | Leave a comment

WordPress: 800,000 websites compromisable by All in One SEO plugin

Posted on 2021-12-23 by guenni

[German]The popular WordPress plugin All in One SEO has two vulnerabilities (CVE-2021-25036 and CVE-2021-25037), which make the corresponding installations vulnerable. Since the plugin is quite popular, you should immediately look to get an updated version. Otherwise, the WordPress instance will be hacked sooner or later.n sofort schauen, dass man eine aktualisierte Fassung erhält. Sonst wird die WordPress-Instanz früher oder später gehackt.

Continue reading →

Posted in Security | Tagged , | Leave a comment

Microsoft warns against Active Directory domain takeover due to unpatched vulnerabilities

Posted on 2021-12-22 by guenni

Windows[German]Microsoft warned of a new threat in a Techcommunity post on December 20, 2021. In November 2021 patchday, vulnerabilities CVE-2021-42287 and CVE-2021-42278 were fixed by Windows updates. Since December 2021, a proof of concept (PoC) has been available that abuses these vulnerabilities to take over an Active Directory domain. Here's some information – and at the same time I can help cover a topic that has been awaiting publication here for a few days.

Continue reading →

Posted in Security, Update, Windows | Tagged , | Leave a comment