SANS: Browser isolation against 0-days and missing updates

Posted on 2021-01-24 by guenni

[German]A large proportion of successful cyber attacks are possible via 0-day vulnerabilities or unpatched browsers. The rise of home office solutions in the wake of the coronavirus pandemic exacerbates this problem. In some environments, updating the browser used is also a problem, which also has a negative impact on security. In such cases, the SANS Institute recommends browser isolation to render browser vulnerabilities ineffective.

Continue reading →

Posted in Security | Tagged , | Leave a comment

Sonicwall NetExtender vulnerability exploited by APT group

Posted on 2021-01-23 by guenni

[German]Sonicwall has been attacked by an ATP group and the attackers probably had access to the provider's code. Sonicwall has already confirmed this. Those who use Sonicwall products should respond.

Continue reading →

Posted in Security | Tagged | Leave a comment

Sandboxie v0.5.5 / 5.46.4 released

Posted on 2021-01-23 by guenni

[German]David Xanatos informed me that he released a major update for Sandboxie in version v0.5.5 / 5.46.4 on Githib on January 19, 2021. Here is some information about it.

Continue reading →

Posted in Software, Update | Tagged , | Leave a comment

Windows 10 Preview Updates (Jan, 21, 2021)

Posted on 2021-01-22 by guenni

[German]As of January 21, 2021, Microsoft has released several optional cumulative (preview) updates for Windows 10 as well as its Windows Server counterparts. With a group policy, administrators can lock Internet Explorer 11 and redirect it to Edge's IE Mode. In addition, crashes in lsass.exe with sporadic restarts have been fixed in Windows 10 V1909. Here is an overview of the affected packages.

Continue reading →

Posted in Update, Windows | Tagged , | Leave a comment

Edge 88.0.705.50 released

Posted on 2021-01-22 by guenni

Edge[German]Microsoft has released the update to Edge 88.0.705.50 on January 21, 2021. It is a new version with some changes (FTP and Flash are omitted), numerous innovations but also various security fixes. Here is some information about it.

Continue reading →

Posted in browser, macOS, Software, Update, Windows | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

UK Windows 10 school laptops shipped with Gamarue malware

Posted on 2021-01-22 by guenni

[German]The British Ministry of Education has delivered several thousand Windows notebooks to schoolchildren, some of which may have been infected with malware ex works. The malware 'phoned' Russian servers diligently on affected devices.

Continue reading →

Posted in devices, Security, Windows | Tagged , | Leave a comment

Chrome 88.0.4324.96: MSI install fails with error 1722 on fresh systems

Posted on 2021-01-21 by guenni

[German]The Chrome browser version 88.0.4324.96 released as of January 19, 2020 in the desktop version for Linux, macOS and Windows has an issue. This browser cannot be installed in the MSI variant on fresh systems without an older Chrome version.

Continue reading →

Posted in browser, issue, Software, Update | Tagged , , | 1 Comment

Windows Secure Boot (DBX) Update KB4535680 offered on BIOS Systems

Posted on 2021-01-21 by guenni

[German]Microsoft has released the Windows security update KB4535680 for Secure Boot (DBX). The update will be offered via Windows Update. Some users with BIOS boards are also receiving this update. Here are a few remarks about that topics.

Continue reading →

Posted in Security, Update, Windows | Tagged , , | Leave a comment

Oracle Weblogic RCE vulnerability CVE-2021-2109

Posted on 2021-01-21 by guenni

[German]There is a serious remote code execution (RCE) vulnerability CVE-2021-2109 in Oracle WebLogic Server that allows the server to be taken over. Oracle released a patch to close the vulnerability in January 2021.

Continue reading →

Posted in Security | Tagged | Leave a comment

VLC Player 3.0.12 and 3.0.12.1 for Mac M1

Posted on 2021-01-20 by guenni

Sicherheit[German]The developers of the VLC Player have released version 3.0.12 for Linux, macOS and Windows. It is only a maintenance update, which should fix bugs and security gaps. For Macs with M2 chip, however, there is the version 3.0.12.1 of the VLC Player for the first time.

Continue reading →

Posted in Software, Update | Tagged , , | Leave a comment