[German]Security researcher Jeremiah Fowler came across a freely accessible and unprotected database on the Internet. The find was quite something, as a look at the data sets suggests that it was probably data collected by InfoStealer malware. Records containing 184 million logins and passwords were stored in the database.
[German]Law enforcement officers seized 300 servers and 650 domains used for ransomware attacks this week in Operation Endgame. As a result, cybercriminal networks were dismantled, funds confiscated and some suspects arrested. Further actions against cybercriminals were carried out with the Raptor and DANABOT campaigns. Here is an overview.
[German]Delegated Managed Service Accounts (dMSAs) have been introduced in Windows Server 2025. These are service accounts for the Active Directory (AD) that are intended to enable new functions. Security researchers have now discovered that by misusing dMSAs, attackers can take over any principal in the domain.
[German]Law enforcement officials seize Lumma Stealer infrastructure (May 2025)In a coordinated operation, US law enforcement officials have seized the infrastructure (C & C servers) of the Lumma infostealer and paralyzed its function. The malware is responsible for numerous cyberattacks on users involving the interception of information and almost 400,000 PCs were infected.
[German]Following VMware by Broadcom's harsh treatment of customers and partners, FSAS Technologies (Fujitsu) is now suspending the VMware partnership from June 2025 onwards.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Last week, I reported on an impending wave of redundancies at Microsoft. 6,000 employees (approx. 3 % of the workforce) are to go. It is now becoming clear that long-time developers will also be affected.
[German]On May 13, 2025, Microsoft released the cumulative security update KB5058411 for Windows 11 24H2 and Windows Server 2025 (24H2). This has the incredible size of 4368.9 MByte. This raises the question of what makes the update package so bloated? Spoiler: It's the AI stuff that Microsoft is including in the update.
[German]A frustrated buyer of a used VW vehicle was unable to register for Connected Car because the data was sent to the previous owner. So he took a closer look and was able to determine the server access data through OTP bypassing. He then used the chassis number to obtain the vehicle history and the previous owner's personal data. The incident took place in India – but I'm not sure whether the VW app "My Volkswagen" doesn't handle the whole thing in exactly the same way.
[German]At the BUILD 2025 developer conference, Microsoft announced that it had released WSL (Windows Subsystem for Linux) as open source and is being celebrated by developers. The hope from Redmond is that software developers can now contribute to WSL and create their own versions.
[German]With the Windows 10 22H2 update of May 13, 2025, there was the problem that numerous systems got stuck in WinRE with a request for the Bitlocker recovery key. When the key was entered, some systems entered a boot loop. Microsoft has released an out-of-band update on May 19, 2025, which should fix the problems.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
