[German]I had warned here in the blog several times that unpatched Exchange servers are attacked by thread actors, and that they are abused to send spam after a takeover. A blog reader has now sent me a short info (thanks) because he found a compromised Exchange server that was compromised and sent infected spam mails.
[German]A quick question for administrators who use Citrix VDI/TS for virtualization and have Google Chrome or Microsoft Edge as their browser. There are reports that there are crashes in the clients. Can anything be confirmed and is a solution known? Continue reading
[German]Microsoft has updated the Edge browser to version 96.0.1054.41 on November 30, 2021. The release notes only talk about "Fixed various bugs and performance issues" without going into further details.The browser should update automatically, but can also be downloaded here. (via)
[German]Hoh hoh, folks, today we can open the second door in the Advent calendar and see what Microsoft has put in as a surprise for us. Today we find the AppX installer, which is used in Windows 10 and Windows 11 to install applications and apps. Here's a quick overview of why you shouldn't take the expression "Trusted Apps" quite so literally. Because the associated installer may well flush malware onto the system, but shows the apps as trusted due to a serious design flaw. This mechanism is abused by Emotet ransomware gang to spread a dropper.
[German]Investigations by Europol and other law enforcement agencies uncovered a network of money mules that have been identified. The money mules laundered profits from online scams such as compromising business emails and forex fraud. In a joint operation with various law enforcement agencies, Europol arrested a total of 1,803 people accused of laundering money for Internet fraud.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]The latest feature called Buy Now, Pay Later (BNPL), which Microsoft has added to the Edge browser for US users, seems to be causing massive anger among users. It's yet more evidence that Microsoft has lost its sense of what's important to users.
[German]It seems, that many vulnerable Microsoft Exchange servers are been used to play Russian roulette. German CERT-Bund has alerted a warning. They found about 12,000 Exchange Servers 2013/2016/2019, whose OWA is accessible via the Internet and which have at least one unpatched critical vulnerability.
[German]A brief note for administrators. Microsoft Defender reportes a PowEmotoet.SB infection has been blocked and quarantined and possibly triggers Microsoft Office? This is a false alarm, which was triggered by an update of the signature files to version 1.353.1874.0. Here is some information on what is known so far.
[German]Today (Nov. 30,) is Computer Security Day, and this topic fits perfectly. There are several firmware vulnerabilities of certain HP LaserJet, HP LaserJet Managed, HP PageWide and HP PageWide Managed products. These are potentially vulnerable to a buffer overflow. This means attackers could intercept print jobs or scans and potentially worm corporate networks.
[German]Japanese (electronics) company Panasonic admitted last Friday to unauthorized access to its servers by a third party. A thin-lipped announcement reported only one access on Nov. 11, 2021. But those accesses appear to have occurred over the past four months, if media reports are accurate.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
