[German]A code analysis of the SolarWinds Sunburst backdoor by security researchers from Kaspersky fuels the suspicion that the originators are to be found in Russia. The code resembles malware attributed to Russian ATP groups in some parts.
[German]In Windows 10 20H2, some users had the problem that the Local Security Authority Subsystem Service file (lsass.exe) crashes in certain constellations. Microsoft had set an upgrade stop, but was able to eliminate the lsass crash error 0xc0000374, which has plagued users of Windows 10 20H2 since October 2020, now on January 7, 2021.
[German]The current 5th Generation of mobile device networking is unfolding faster than ever, promising download, upload, and latency speeds 10 to 100 times faster than the current 4G network. The Coronavirus pandemic didn't impact the 5G networks' rapid deployment throughout the United States and several countries in Europe. Meanwhile, many countries in other regions are announcing "trial" rollouts of 5G or investment plans for such networks. Were are the fastest next-gen 5G networks?
[German]A German blog reader contacted me a day ago with a problem he was facing. After upgrading from Windows 8.1 to Windows 10, both the Microsoft Store and the apps on Windows 10 disappeared. The cause is probably Roaming Profiles that were used there. Here is some information about it.
[German]Security researchers from Palo Alto Networks warn of a current email-based attack campaign TA551, which now also targets German-, Italian- and Japanese-speaking victims. Malware-infested email attachments are old hat – but I'm posting the warning here.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has published a security advisory on January 7, 2021, regarding another security update for the Edge browser. Microsoft had to close three vulnerabilities that were unpatched in Edge 86.0.664.57. Here is some brief information about it.
[German]Information for administrators in server environments. Communication with (web) servers should be performed with current TLS 1.2 or TLS 1.3 encryption. Fallback to older TLS 1.0/1.1 or SSL standards should be removed. The US National Security Agency (NSA) has issued recommendations on this.
[German]It is currently being investigated whether the SolarWinds hack could have been carried out via the TeamCity software of the Eastern European company JetBrains. In addition, it became known that the SOLARBURST hackers had access to e-mail accounts of the U.S. Department of Justice. And the Capitol's IT staff faces the problem of cyber security after a mob raided this building.
[English]Just a short information from a blog reader who is being re-offered a 2019 update for VMware as of January 5, 2021. I am interested in whether this is an isolated case or affects more users.
[German]ACROS Security has released a micropatch for a Local Privilege Escalation 0-day vulnerability in the SysInternals tool PsExec for its 0patch agent. PsExec is used by administrators to perform tasks with system privileges.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
