[German]On March 9, 2021, Microsoft has released security updates for Windows clients and servers, for Office, Internet Explorer, and so on. Below is a compact overview of these updates.
[German]Microsoft issued more out-of-band updates for older Microsoft Exchange Server CUs (which have already fallen out of support) last night. In addition, it is now clear, when the attack waves started and what could have protected against the hack, although four 0-day exploits existed for months. Let me summarize some new information in this post.
[German]The developers of the Thunderbird email client have released Thunderbird 78.8.1 on March 8, 2021. This is a maintenance update for the 78 main version of the email client, which fixes various bugs.
[German]In the context of the digital developer conference Ignite 2021, Microsoft also announced a new approach for installing driver and firmware updates. Windows administrators are expected to have full control over these updates at some point in the future.
[German]I already came across the information from Flashpoint a few days ago, according to which the Russian-language hacker forum Maza itself was hacked. It seems that credentials of users in other forums have been published.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]VMware View Planner has several vulnerabilities, that can be used for Remote Code Execution (RCE). VMware has issued a warning and also security updates for View Planner.
[German]The European Banking Authority has fallen victim to a cyber attack. Their Exchange servers were compromised via vulnerabilities patched in early March 2021. Here is some information on what I know so far.
[German]Security researchers have recently encountered a family of botnets called Gafgyt that targets D-Link, Citrix and IoT devices. It is the first malware family to attack vulnerabilities in devices via the Tor network.
[English]Redmond has added security information to the latest version of the Microsoft Support Emergency Response Tool (MSERT). The tool can now be run to detect and eliminate the latest Exchange Server threats. Specifically, the tool finds installed Web shells in Exchange instances.
[German]The Hafnium hacker group has probably managed to compromise hundreds of thousands of Exchange installations worldwide via vulnerabilities. A patch to close the vulnerabilities is available, but it may be too late. However, tools are now available from Microsoft and third parties to check Exchange instances for signs of the hack.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
