[German]Microsoft issued a warning to its Azure customers about a security vulnerability that could have allowed hackers to access data. The punchline: It involved containers whose code had a known vulnerability that had not been patched. Microsoft has now updated the programs. This is now the second case within a few days where serious vulnerabilities in Azure containers became public.
[German]WordPress 5.8.1 has been released as a maintenance update on September 8, 2021. The update fixed three vulnerabilities in WordPress versions between 5.4 and 5.8. Therefore, older were all WordPress versions since 5.4 also updated. Furthermore, a number of bugs were fixed. Details about the security issues and bug fixes can be found in the release notes.
[German]An unpatched vulnerability exists in GhostScript (up to v 9.50) that allows privilege escalation. Servers running the ImageMagick program are particularly at risk. These could be taken over by attackers. The vulnerability was discovered a year ago, but allegedly not reported to the developers. And now there is a proof-of-concept (PoC) to exploit the vulnerability via exploit. Since tools like ImageMagick use GhostScript internally and are used by many companies, admins should respond and update GhostScript
[German]Microsoft has issued a warning about the remote code execution vulnerability CVE-2021-40444 as of September 7, 2021. In campaigns, this vulnerability, which targets the MSHTML component of Internet Explorer, is exploited via compromised Office documents. Microsoft provides guidance on mitigating this vulnerability, which stems from the ActiveX technology introduced with Internet Explorer.
[German]In addition to the update of Thunderbird 78.14.0, the developers have also released Thunderbird 91.1.0 as of September 7, 2021. This is a maintenance and security update for the 91 development branch.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On September 7, 2021 (first Tuesday of the month, Office Patchday), Microsoft releases non-security updates for still-supported versions of Microsoft Office. This month, however, there is only one update for Microsoft Office 2016. . Here's a brief overview.
[German]The developers of the Thunderbird email client have released Thunderbird 78.14.0 as of September 7, 2021. This is a maintenance and security update for the 78 development branch.
[German]Since July 2021, users of Microsoft Office Apps (Office 365) sometimes face the problem that the login fails with the error 0xC0070057. The application in question, such as Microsoft Teams, is then no longer usable. I have been alerted to the problem by a user, but have also found corresponding messages on the Internet. Here's an overview of what it's all about.
[German]Mozilla's developers have released the version 92.0.0, 91.1.0esr and 78.14.0 ESR of the Firefox browser on September 7, 2021. The version 92.0.0 is a new development branch of the browser, and the ESR is in each case a security update, which should eliminate vulnerabilities, but also fix bugs.
[German]Swiss-based email service ProtonMail offers end-to-end encryption of mails before they are sent to ProtonMail's server. ProtonMail is operated by Proton Technologies AG, which is based in Plan-les-Ouates (Canton of Geneva). Its servers are located in two locations in Switzerland, outside EU and US jurisdiction. As a result, ProtonMail is (supposedly) considered a "secure email service and haven of privacy." Now ProtonMail has again releaed the IP address of a French activist to the police.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
