SolarWinds hackers had access to Microsoft source code

[German]Microsoft has admitted that the hackers who introduced the SolarWinds backdoor into the Orion software had access to project source code. Code could allegedly not be changed, however.

Continue reading

Posted in Security | Tagged | Leave a comment

Advertising

Happy new year 2021

That's what I wish all blog readers – and also health and happiness – and of course no New Year's hangover.

Continue reading

Posted in General | Tagged | Leave a comment

Security Baseline for Windows 10/Server 20H2 released

Microsoft has published the final release of Security Baseline package for Windows 10 version 20H2 and Windows Server version 20H2. The announcement has been made in this Techcommunity blog post. The Security Baseline package is a set of tools, that allows enterprise security administrators to download, analyze, test, edit and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products, while comparing them against other security configurations. The Microsoft Security Compliance Toolkit 1.0 can be downloaded for free.

Posted in Security, Windows | Tagged , | Leave a comment

Adobe Flash is reaching now the End

SicherheitJust a small reminder for users of Windows 8.1 and Windows 10. Adobe and Microsoft will retire the Flash Player today (December 31, 2020) – Flash has reached the end of the product's lifecycle.

Continue reading

Posted in Security | Tagged | 2 Comments

CheckPoint VPN clients before V E81.20 fails after January 1, 2021 due to expired certificate

[German]Are you using an older CheckPoint VPN Client and/or a CheckPoint Endpoint Security Client before version E81.20? Since a certificate expires at the turn of the year, the CheckPoint software in question will no longer work after Jan. 1, 2021. Especially silly: anti-bot, forensics and firewall blade may stop working without being reported. An update has been available since August 2019.

Continue reading

Posted in Security, Software | Tagged , , | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Undocumented User in Zyxel Products (CVE-2020-29583)

[German]In many Zyxel products (firewalls) there is a vulnerability CVE-2020-29583 in the form of an undocumented user. The manufacturer has since released firmware updates to fix the vulnerability.

Continue reading

Posted in Security | Tagged | Leave a comment

Advertising

IT outage at cruise company AIDA due to a cyber attack?

[German]The cruise company Aida Crusies has canceled all New Year's Eve trips on its cruise ships. The reason are mysterious IT outages that lead to restrictions on board the cruise ships. The company is keeping a low profile, prosecutors are investigating cybercrime, and there are suspicions that the cruise line may have been the victim of computer sabotage.

Continue reading

Posted in Security | Tagged | Leave a comment

Windows 10 Version 1809-2004: Driver installation via store broken

[German]Are the GUI components for drivers (e.g. for Intel Graphics or Waves MaxxAudio settings) suddenly missing after Windows 10 setup? A crude bug causes the driver GUI components originally installed as a UWP app during setup from the Microsoft Store to be removed during the OOBE phase. Here's some information on this issue, which was detected in Windows 10 version 1809 but affects all Windows 10 builds up to Windows 10 version 2004 – it's only fixed in Windows 10 20H2.

Continue reading

Posted in issue, Windows | Tagged , , | Leave a comment

Advertising

German BKA and FBI warns of China espionage by GoldenSpy

[German]The German Federal Criminal Police Office (BKA) and the FBI has already published a warning about Chinese spyware activities against German and other foreign  companies that maintain business relations in China.

Continue reading

Posted in Security | Tagged | Leave a comment

Unprotected Azure blob exposes 500,000 confidential documents

[German]A British app developer made a big mistake by running a Microsoft Azure Blob unprotected in the cloud. As a result, over 500,000 confidential documents, some with medical data, could be accessed publicly and without any access control.

Continue reading

Posted in Security | Tagged | Leave a comment