Windows 10/11: The risky "trusted" Apps-Installer – abused by Emotot gang

Posted on 2021-12-02 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Hoh hoh, folks, today we can open the second door in the Advent calendar and see what Microsoft has put in as a surprise for us. Today we find the AppX installer, which is used in Windows 10 and Windows 11 to install applications and apps. Here's a quick overview of why you shouldn't take the expression "Trusted Apps" quite so literally. Because the associated installer may well flush malware onto the system, but shows the apps as trusted due to a serious design flaw. This mechanism is abused by Emotet ransomware gang to spread a dropper.

Continue reading →

Posted in Security, Software, Windows | Tagged , | Leave a comment

Europol arrests 1,803 money mules of Internet fraudsters

Posted on 2021-12-02 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Investigations by Europol and other law enforcement agencies uncovered a network of money mules that have been identified. The money mules laundered profits from online scams such as compromising business emails and forex fraud. In a joint operation with various law enforcement agencies, Europol arrested a total of 1,803 people accused of laundering money for Internet fraud.

Continue reading →

Posted in Security | Tagged | Leave a comment

User angry about Edge feature Buy Now, Pay Later

Posted on 2021-12-01 by guenni

Edge[German]The latest feature called Buy Now, Pay Later (BNPL), which Microsoft has added to the Edge browser for US users, seems to be causing massive anger among users. It's yet more evidence that Microsoft has lost its sense of what's important to users.

Continue reading →

Posted in browser | Tagged | 2 Comments

German CERT-Bund warns about vulnerable Exchange Server with OWA reachable from Internet

Posted on 2021-12-01 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]It seems, that many vulnerable Microsoft Exchange servers are been used to play Russian roulette. German CERT-Bund has alerted a warning. They found about 12,000 Exchange Servers 2013/2016/2019, whose OWA is accessible via the Internet and which have at least one unpatched critical vulnerability.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Microsoft Defender Version 1.353.1874.0 version 1.353.1874.0 incorrectly reports Emotet

Posted on 2021-12-01 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A brief note for administrators. Microsoft Defender reportes a PowEmotoet.SB infection has been blocked and quarantined and possibly triggers Microsoft Office? This is a false alarm, which was triggered by an update of the signature files to version 1.353.1874.0. Here is some information on what is known so far.

Continue reading →

Posted in Security, Windows | Tagged , , | 6 Comments

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Printing Shellz: Vulnerabilities in HP multi-function printers (MFPs)

Posted on 2021-11-30 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Today (Nov. 30,) is Computer Security Day, and this topic fits perfectly. There are several firmware vulnerabilities of certain HP LaserJet, HP LaserJet Managed, HP PageWide and HP PageWide Managed products. These are potentially vulnerable to a buffer overflow. This means attackers could intercept print jobs or scans and potentially worm corporate networks.

Continue reading →

Posted in devices, Security | Tagged , , , | Leave a comment

Panasonic: Data leak over four months

Posted on 2021-11-30 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Japanese (electronics) company Panasonic admitted last Friday to unauthorized access to its servers by a third party. A thin-lipped announcement reported only one access on Nov. 11, 2021. But those accesses appear to have occurred over the past four months, if media reports are accurate.

Continue reading →

Posted in Security | Tagged | 1 Comment

November 30, is Computer Security Day

Posted on 2021-11-30 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]November 30, is Computer Security Day, a day that has been dedicated to secure IT worldwide since 1988. The initiative for Computer Security Day goes back to the US Association for Computer Security Day. The aim of this day of action: to give the topic of computer and information security a firm place in the public consciousness and to sensitize individuals to this complex of topics.

Continue reading →

Posted in Security | Tagged | Leave a comment

Windows 10/11 mini-survey shows: Microsoft missed terrible the user needs (2021)

Posted on 2021-11-29 by guenni

Windows[German]It is sometimes hotly debated, whether Microsoft is developing Windows 10 and especially Windows 11 past the need. Susan Bradley conducted a mini-poll on SurveyMonkey weeks ago on the topic of "how satisfied are you with Windows 10/11 and the updates, the feature updates and the features offered". The evaluation from the end of September has only just come to my attention. First of all, the results are a severe slap in the face for Microsoft's marketing, which has been developing products that are not in line with the market's needs for years.

Continue reading →

Posted in General, Windows | Tagged , | Leave a comment

Cynos Android malware infects more than 9 million Huawei smartphones

Posted on 2021-11-29 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The Chinese smartphone manufacturer Huawei has temporarily removed 190 Android apps from its app store. The reason: Russian security vendor Dr. Web had discovered that these apps were infected with the Cynos Android malware while analyzing apps in the Huawei app store.

Continue reading →

Posted in Android, Security | Tagged , , , | Leave a comment