[German]There is a new vulnerability in the WordPress plugin Ninja Forms that affects all versions up to 3.6.3. An SQL injection is potentially possible via the vulnerability, so that database queries via input fields are conceivable. The plugin provider released version 3.6.4 two days ago.
[German]The state hacker group Lazarus, attributed to North Korea, seems to have changed its strategy and is trying to attack software supply chains. It is possible that many dependent systems could be infected via such supply chain attacks. Security researchers from Kaspersky have observed corresponding activities in this direction.
[German]Microsoft has started to automatically install its PC Health Check app on Windows 10 systems via Windows Update. The update KB5005463 installs the app automatically. The controversial app can be used to check whether the computer meets the minimum hardware requirements for Windows 11.
[German]As of October 26, 2021 (4th Tuesday of the month, D-Week), Microsoft has released an optional cumulative (preview) update for Windows 10 version 2004 through version 21H1. I haven't found anything on Windows 10 version 1909. Here is an overview of the preview update.
[German]In this blog post, Microsoft accuses state-related Russian hackers from the APT29 group Nobelium of successfully attacking and hacking at least 14 IT service providers in 2021. The attacks consisted of phishing and password spraying campaigns. In the campaigns, the APT29 group (Nobelium) targeted around 140 resellers of cloud and IT services around the world.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Two add-ons named Bypass and Bypass XM, which together have about 455,000 users, have been blocked by Firefox developers. The background is that the add-ons abused the Firefox proxy API to redirect websites or block updates. Here is some information about it.
[German]Apple has released the update to iOS 15.1 and iPadOS 15.1 on October 25, 2021. This update is available for iPhone 6s and newer, iPad Pro (all models), iPad Air 2 and newer, iPad 5th generation and newer, iPad mini 4 and newer, and iPod touch (7th generation). The Apple website does not yet contain any details about the changes – but the colleagues from okawa.com have already published a list of the fixes here.
[German]Exactly 20 years ago, on October 25, 2001, Microsoft launched a new operating system called Windows XP (XP stands for eXPerience). What was heavily criticized at the beginning because of its colorful (Luna) user interface and "immense resource consumption" later turned out to be a terrific success for Microsoft. Windows XP was so successful that it simply can't be killed off – it has become a veritable zombie. Even today, millions of computers are still working with this operating system, although its support was discontinued on April 8, 2014. So happy anniversary to Windows XP.
[German]Security vendor Palo Alto Networks presented its Unit 42 Cloud Threat Report 2H 2021 before the end of last month. The conclusion is that attacks on software supply chains in the cloud are exacerbating the threat situation for companies. To do so, Palo Alto Networks experts analyzed data from a variety of public data sources around the world.
[Geman]The developers of the Thunderbird email client have released Thunderbird 91.2.1 on October 21, 2021. This is a maintenance update for the 91 development branch, which makes minor fixes. Here is a brief overview.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
