[German]Security researchers from Check Point have discovered a vulnerability in an Android APU, the APU is the AI Processing Unit in MediaTek chips. The security researchers warn that users can be eavesdropped via the audio processor. The Mediatek chips are installed in 37% of all Android devices. The incident is reminiscent of the vulnerability in Qualcomm chips.
[German]As of November 19, 2021, Microsoft has released the cumulative preview update KB5007289 for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, Windows Server, version 20H2 and Windows version 21H1. The update fixes several bugs in WPF and in SQL Connection. As a preview it is optionally available via the update search in Windows Update as well as in the Microsoft Update Catalog. Details can be found in the support article.
[German]Today a short info splitter for tinkerers among the blog readership. With YARP (stands for Yet Another Reverse Proxy) a free framework is available to generate a reverse proxy. The framework has been provided by Microsoft teams.
[German]Oracle's developers have already released Virtualbox version 6.1.30 on November 22, 2021. It is a maintenance update that is supposed to fix bugs of previous versions.
[German]On November 22, 2021, Mozilla developers released version 94.0.2 as a maintenance update of the Firefox browser. According to the release notes, there are only two bug fixes.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On November 22, 2021, Microsoft released several optional cumulative updates for Windows 10 version 1809 (LTSC, Server) as well as version 2004 to 21H2 (and Server) that are supposed to fix various bugs. These include bugs in network printing as well as in the Windows Installer. Here are some details about the respective updates.
[German]Microsoft has released the update KB5007262 for Windows 11 on November 22, 2021. It is an optional update that is supposed to fix a long list of fat bugs in this best of all Windows operating systems. I've seen in various blogs that they are celebrating the new icons. But the beef for me is in the fix for printer errors 0x000006e4, 0x0000007c and 0x00000709 on the network and other fixes in search or USB printing via Internet Printing Protocol.
[German]Currently, I warn about running unpatched Exchange vulnerabilities and ProxyShell attacks almost on a daily basis. A few days ago, Trend Micro issued a warning about attacks against ProxyShell vulnerabilities via the Squirrelwaffle exploit and the takeover of Exchange email mailboxes. As of a few hours ago, another exploit is public as a proof of concept, and exploitation against unpatched Exchange servers is likely. So patch the systems!
[German]A security researcher has found a 0-day vulnerability in Windows Installer that allows a local attacker to gain administrative privileges. The 'Windows Installer Elevation of Privilege' vulnerability CVE-2021-41379 has been patched in November 2021. But there is a workaround, the patch is ineffective. All Windows versions are affected, including Windows 10, that brand new Windows 11, and all Windows Server versions.
[German]This is a heavy stroke for many people with web presences. The US hoster GoDaddy has become a victim of a cyberattack. The attackers managed to gain access to the Managed WordPress hosting environment of this provider.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
