[German]Security researchers at Qualsys have discovered a vulnerability (CVE-2021-3156) in the BSD/Linux Sudo command. Due to a heap overflow, attackers with normal privileges could achieve privilege escalation to root. However, updates for the vulnerability are now available from major Linux distributions.
[German]Microsoft has released various Intel microcode updates for Windows 10 version 1903 to 20H2 as of January 26, 2021. For other versions, however, the microcode updates remain unchanged. EP has linked the KB articles within this comment.
[German]The German Federal Criminal Police Office (Bundeskriminalamt) and the Frankfurt General Prosecutor's Office (Generalstaatsanwaltschaft) have initiated a "takedown" of the Emotet infrastructure internationally. The Emotet servers were taken over and then the infrastructure was shut down.
[German]Apple has just released iOS 14.4 and iPadOS 14.4 as a security update. The update closes three vulnerabilities that are exploited by 0-day exploits.
[German]The Solarigate story continues. Now four other security vendors have disclosed "incidents" related to the supply chain attacks via SolarWinds Orion products.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Mozilla developers have released Firefox browser version 85.0.0 and 78.7.0 ESR as of January 26, 2021. Firefox 85 is a new branch for the browser and the ESR gets security updates. Here is an overview of the updates.
[German]Another small piece of information for administrators of a Hyper-V cluster under Windows Server 2019. It looks like Intel has disabled RSC support for all NICs on the driver side as of release 1903. In addition, storage stacks write operations tagged as write-through, bypassing caching. A user has informed me about that.
[German]Developers at OSR have released an open-source filter driver that prevents the recently publicized NTFS bug, which can be used to corrupt NTFS volumes, from being exploited. This provides temporary protection for affected Windows 10 and Server systems until Microsoft finally comes around with a fix.
[German]The dating platform MeetMindful was the victim of a hack in which the database with user data was copied. This user data has now been posted for download by the hacker in an underground forum.
[German]Windows tool developer IOBit became a victim of a ransomware attack again last weekend, after the IOBit forum was already hacked and ransomware was spread to forum users a week ago. Here are some information what's known so far.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
