[German]Security researchers from ETH Zürich has developed a new Rowhammer technique – using fuzzing – to bypass DDR4 memory protections and flip memory cells. That technique, called Blacksmith, allows an unprivileged process to change or corrupt data stored in RAM cells. This new technique also allows to bypass DDR4 memory protections methods developed so far.
[German]The Emotet malware (Trojan and ransomware) was quite successful and infected numerous systems. Law enforcers had managed to hack the botnet's infrastructure for distributing the malware. As of April 25, 2021, Emotet malware was automatically removed from Windows machines. However, it was not permanent, because the Emotet malware is back and building a new botnet.
[German]The developers of the Thunderbird email client have released Thunderbird 91.3.1 on November 15, 2021. This is a maintenance and security update for the 91 development branch, which makes minor fixes. Here's a brief overview.
[German]Google has released an update to Google Chrome 96.0.4664.45for Windows, Mac and Linux (and Android) on November 15, 2021. It is a new development branch, but which also closes some vulnerabilities. Here's a brief overview.
[German]Today, November 15, 2021, marks the 50th anniversary of the Intel® 4004, the world's first commercially available microprocessor. Launched in November 1971, the 4004 paved the way for modern microprocessor computing – the "brains" that enable nearly every modern technology, from the cloud to the edge. Microprocessors enable the convergence of technological superpowers – ubiquitous computing, ubiquitous connectivity, cloud-to-edge infrastructure and artificial intelligence – and provide a pace of innovation that is faster today than ever before.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has released unscheduled, so-called out-of-band updates for various versions of Windows 10 and Windows Server 2016 / 2019 as well as Windows Server 2012 R2 and Windows Server 2008 R2 on November 14, 2021. These are intended to fix domain controller authentication errors that occurred with the November 2021 patchday updates. Here is some information about them.
[German]It's a trend that's been around for a while: fit IT professionals are hiring cyber mercenaries to carry out cyber attacks. Trend Micro has now exposed a cyber mercenary group called "Void Balaur." New research details the modus operandi of the contract hacking group. Motivated by espionage and financial interests, these contract hackers have targeted more than 3,500 companies and individuals since 2015. Among the victims are human rights activists, journalists, politicians, and technical executives in telecommunications companies.
[German]It's been going around Twitter for a few hours now: the Federal Bureau of Investigation's (FBI) email servers were hacked. The attackers then sent out hundreds of thousands of urgent warnings about alleged cyberattacks to numerous recipients. Administrators struggled to deal with these emails, which carried the FBI as the sender but were easily identifiable as SPAM. Here's a brief overview.
[German]In 2016, the hotel reservation platform booking.com, which is also quite popular in Germany, suffered a data protection breach caused by a hack, for which the platform was not responsible (access data of hotel employees was stolen). Because the incident was reported too late, the Dutch data protection regulator imposed a fine. Now it turns out that the hack at Booking.com was probably carried out by an employee of the US Secret Service. They wanted to get the booking data of hotels in Arab countries.
[German]I'm going to post a topic here on the blog that affects administrators of Windows systems in companies. How do you actually make sure that the central ADMX store for Windows group policies always stays up to date and can be restored in case of corruption? Without up-to-date ADMX files in the store, group policies can't really be used efficiently.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
