Data leak at Fintech Klarna: Third-party accounts viewable

Posted on 2021-05-27 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]I already know why I don't let financial service providers or fintechs access my bank accounts via app. According to media reports, Swedish payment service provider Klarna experienced a serious data protection breach. Users who used the Klarna app were able to view the data and transactions of third-party users for a short time this Thursday morning (May 27, 2021). The provider took the app offline after the data breach became known.

Continue reading →

Posted in Security | Tagged | Leave a comment

Vulnerability CVE-2021-21985 in vSphere Client, patch it!

Posted on 2021-05-27 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]VMware has issued an urgent security warning to users of vSphere. The vSphere Client (HTML5) contains a critical vulnerability CVE-2021-21985 that could allow remote code execution due to a lack of input validation in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server. A second vulnerability affected VMware Cloud Foundation. Security updates for the affected components are available.

Continue reading →

Posted in Security, Software, Virtualization | Tagged , , | Leave a comment

Microsoft 365 bug: Mails from Exchange Online and Outlook send to the spam folder

Posted on 2021-05-27 by guenni

[English]Exchange Online and Outlook users are just noticing that mails end up in the SPAM folder of the mailbox when delivered. Microsoft is now investigating this Microsoft 365/Office 365 issue.

Continue reading →

Posted in Cloud, issue | Tagged , , | Leave a comment

Google Chrome 91.0.4472.77 with security fixes

Posted on 2021-05-27 by guenni

[German]Google has released Google Chrome 91.0.4472.77 on May 25, 2021. It is a security update that fixes 32 vulnerabilities in older browser versions at once.

Continue reading →

Posted in Security, Update | Tagged , , | 2 Comments

Windows 10 2004-21H1: Preview Updates (05/25/021)

Posted on 2021-05-26 by guenni

Windows[German]Following the preview updates for Windows 10 V1809/1909 (see Windows 10 1809/1909: Preview Updates (May 20, 2021)), Microsoft has released another optional cumulative (preview) update for Windows 10 version 2004, 20H2 and 21H1, as well as their Windows Server counterparts, on 5/25/2021. Here's an overview of this update.

Continue reading →

Posted in Update, Windows | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Cybercrime on Telegram: Hackers abuse the messenger

Posted on 2021-05-26 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Telegram is a semi-encrypted messaging and chat app, that's is seen as a rival to Whatsapp. Cybercriminals have moved beyond the Dark Web and started using Telegram to share their hacks and reach a wider audience. Private data from millions of people is openly shared in groups with 10,000s of members, and very little is being done to stop this worrying trend.

Continue reading →

Posted in Security | Tagged | 1 Comment

Windows 10 21H1 reports ReleaseID 2009

Posted on 2021-05-26 by guenni

Windows[German]Since a few days Microsoft has released the Windows 10 May 2021 Update (version 21H1) as a feature update. However, if you want to determine the Windows 10 version via PowerShell or other tools, you run into certain difficulties. The ReleaseID of Windows 10 21H1 returns the value 2009. I happened to come across the corresponding discussion and post this here on the blog for your information.

Continue reading →

Posted in Windows | Tagged | 4 Comments

http-sys vulnerability (CVE-2021-31166) also threatens WinRM service

Posted on 2021-05-25 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The http-sys vulnerability (CVE-2021-31166), which was already patched in May 2021, is more serious than initially assumed. Windows 10/Windows Server systems running the Windows Remote Management Service (WinRM) are also threatened. Administrators should ensure that affected systems are patched, as the http-sys vulnerability allows worm-like spread of malware.

Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment

iOS 14.6 and macOS 11.4 released

Posted on 2021-05-25 by guenni

Apple has released updates to its iOS 14.6 and macOS 11.4 operating systems as of May 24, 2021. iOS 14.6 is available for iPhone 6s and newer, iPad Pro (all models), iPad Air 2 and newer, iPad 5th generation and newer, iPad mini 4 and newer, and iPod touch (7th generation). A list of the closed vulnerabilities can be found here. Apple has published a description of the security fixes for macOS 11.4 here. Bleeping Computer has published some information about the (already exploited) macOS vulnerability here, which has now been patched.

Posted in Software, Update | Tagged , | Leave a comment

Audio manufacturer Bose: Data leak after ransomware attack

Posted on 2021-05-25 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[English]Bose, a manufacturer of audio products, has fallen victim to a ransomware attack. In the process, some of the company's employees' data was also siphoned off, the company has admitted. The malware attack was discovered on March 7, 2021, and on March 29 it was found that data from the human resources department was siphoned off. A few details can be read at Bleeping Computer.

Posted in Security | Tagged | Leave a comment