[German]The log4j vulnerability CVE-2021-44228 keeps sending shockwaves through the IT scene. Latest reports say that a majority of companies have not patched the vulnerability in their software. In addition, a new DoS vulnerability has been found in the library, for which there is no patch yet. Meanwhile, attacks continue to run to new highs. Here's an overview to close out the week.
[German]Microsoft has updated the Edge browser to version 96.0.1054.62 as of December 17, 2021. The release notes only say Fixed various bugs and performance issues. The browser should update automatically, but can also be downloaded here.
[German]Audio gigant Sennheiser was victim of a data protection incident. Sennheiser (audio technology left an old cloud account unprotected on the Internet so that third parties could access customer data. Security researcher found the open Amazon AWS S3-Bitbucket and informed the vender who then secured the data base immediately.
[German]In May 2021, there was a ransomware attack on Ireland's Health Service Executive (HSE). PricewaterhouseCoopers recently provided an analysis of what went wrong. Below I briefly compiled the findings of the investigation from that case.
[German]The December 14, 2021 security updates for Microsoft Office (MSI installer version) cause issues with Microsoft Access. Only one user can still access the databases. In the meantime it is clear that the Click-2-Run versions of Office/Access are also affected by updates. Microsoft has confirmed the problems in the meantime, so I give a short overview again.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]A brief information from the world of networked cars, which is constantly being praised by manufactures. The car manufacturers are seeing the whole thing as an goldmine. Japanese manufacturer Toyota (Slogan: Nothing is impossible) is forging ahead. After some time, the remote-controlled start of a corresponding vehicle will requires a subscription – around 8 US dollars per month – according to some US reports.
[German]Mozilla developers have released version 95.0.1 with some new features and 91.4.1esr of the Firefox browser with a fix on December 16, 2021. The new browsers also correct an access conflict to Microsoft pages that occurred the days.
[German]They did, with the December 2021 security updates, tools that allow Edge log redirection to other browsers were blocked. Tools like EdgeDeflector are thus simply blocked and the user has to display the information in question in Microsoft Edge as the default browser. Here are some additions to a topic I've blogged about recently.
[German]Firefox users seem to have problems accessing Microsoft websites at the moment. A blog reader had already contacted me the other day. Now I read further reports on the Internet that this is not an isolated case, but probably affects more users.
[German]Another addendum from the December 2021 patchday regarding the AppX installer used in Windows. Microsoft has closed the Windows AppX Installer spoofing vulnerability CVE-2021-43890 with an update. The Emotet gang has been trying to exploit this vulnerability to infect systems – I had reported about it here on the blog. Here's a brief overview about that issue.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
