[German]At the end of September 2021, security provider Cyble published an alert. Its security team have discovered a new variant of the Hydra banking Trojan that is specifically targeting European users. Commerzbank customers seem to be one of these targets, as they are being phished with a Trojan disguised as a Commerzbank app for Android.
[German]Microsoft has released a security advisory for the Edge browser on October 1, 2021, updating the browser to version 94.0.992.38. The update also closed Chromium team-reported security vulnerabilities.
[German]Microsoft has announced the availability of Office 2021 and Microsoft 365, as well as the pricing for these packages and subscriptions. Microsoft Office 2021 one-time license packages are scheduled to go live on October 5.
[German]Another brief post in which I revisit a topic from last week. I had reported that there is a vulnerability in the Autodiscover protocol, which is used by Microsoft Exchange, that reveals passwords. In the meantime, Microsoft is trying to get register the abusable Autodiscover domains, based on the reporting. However, it has now become known that this weakness has been known at Microsoft for at least 5 years without anything happening.
[German]Microsoft has released preview update KB5005611 for Windows 10 version 2004 – 21H1 on Sept. 30, 2021. The preview update is optional and is intended to fix various issues (including with Outlook add-ins).In addition, updates KB5005539 (.NET) and KB4023057 (reliability update for update service components) were released. Here is an overview of this update.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Google has surprisingly released an update to Google Chrome 94.0.4606.71 for Windows, Mac and Linux on September 20, 2021. It is a security update that closes vulnerabilities rated as high. Some of the vulnerabilities are being exploited – here's a brief overview.
Today a little story beside the tech stuff, something personally. This morning I was awakening and realized, it was October the 1st in 2021 – so I'm now 28 years in business as a freelance book writer and now also tech blogger. It has a long journey since I've published the first articles about computer in a tech magazine, back in 1985.
[German]As of September 30, 2021, some root certificates that Let's-Encrypt used to sign user certificates expired. This meant that certain devices or applications could no longer access websites or mail servers. I have seen cases with iOS 14/15 and macOS, as well as problems with Internet Information Server (IIS) and Microsoft Exchange. In addition, the Sophos UTM Firewall Application is causing problems because it also uses an affected Let's Encrypt certificate. However, the problems can be solved easily – here is a short overview.
[German]Adobe has released a hotfix for Adobe Acrobat (Reader) DC as of September 29, 2021, bringing the Windows version to 21.007.20095 and the macOS version to 21.007.20096. The hotfix is optional and is supposed to fix a number of bugs – even bug 0xc0000142 of version 21.007.20091 is supposed to be fixed on Windows.
[German]Do you run websites that are signed via Let's Encrypt certificates? Then there could possibly be problems on September 30, 2021. This is because the root certificate used by Let's Encrypt to sign client certificates will lose its validity on this day (expiry of Intermediate R3 on 2021/09/29 at 19:21:40 GMT – the DST Root CA X3 expires on 2021/09/30 14:01:15 GMT). Clients that only know the old root certificates will not be able to verify Let's Encrypt server certificates after that. Addendum: We have seen issues.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
