SolarWinds hack: Hacker goals; outsourcing are under investigation?

Posted on 2021-01-05 by guenni

[German]More and more details about the SolarWinds hack are coming to light, and more and more questions are surfacing. There are a large number of people affected, raising the question of the attackers' targets. In addition, questions are growing louder about why the early warning systems in the U.S. did not kick in, and whether outsourcing to SolarWinds dependencies in Eastern Europe made the attack possible in the first place.

Continue reading →

Posted in Security | Tagged | Leave a comment

Cyber security trends 2021

Posted on 2021-01-04 by guenni

[German]To kick off 2021, I'd like to take a quick look at cybersecurity trends. What can we expect in the next 12 months in this regard, especially after many tasks were moved to the home office in 2020 as part of the Covid 19 pandemic.

Continue reading →

Posted in Security | Tagged | Leave a comment

Retired: Enhanced Security Admin Environment (ESAE) Approach

Posted on 2021-01-03 by guenni

[German]A brief note for admins responsible for security in Active Directory structures and 'secure workstations'. Microsoft has retired the Enhanced Security Admin Environment (ESAE) architectural approach to securing AD computer structures.

Continue reading →

Posted in Security | Tagged | Leave a comment

Good news: Most messaging apps are secure

Posted on 2021-01-03 by guenni

With the Covid-19 pandemic forcing many countries to go into lockdown, people are having to talk to their friends and family or customers online rather than in person. The good news: Most messenger apps are secure, but be careful with Facebook Messenger and Telegram – they're not secure by default.

Continue reading →

Posted in Security, Software | Tagged | 1 Comment

SolarWinds hackers had access to Microsoft source code

Posted on 2021-01-02 by guenni

[German]Microsoft has admitted that the hackers who introduced the SolarWinds backdoor into the Orion software had access to project source code. Code could allegedly not be changed, however.

Continue reading →

Posted in Security | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Happy new year 2021

Posted on 2021-01-01 by guenni

That's what I wish all blog readers – and also health and happiness – and of course no New Year's hangover.

Continue reading →

Posted in General | Tagged | Leave a comment

Security Baseline for Windows 10/Server 20H2 released

Posted on 2020-12-31 by guenni

Microsoft has published the final release of Security Baseline package for Windows 10 version 20H2 and Windows Server version 20H2. The announcement has been made in this Techcommunity blog post. The Security Baseline package is a set of tools, that allows enterprise security administrators to download, analyze, test, edit and store Microsoft-recommended security configuration baselines for Windows and other Microsoft products, while comparing them against other security configurations. The Microsoft Security Compliance Toolkit 1.0 can be downloaded for free.

Posted in Security, Windows | Tagged , | Leave a comment

Adobe Flash is reaching now the End

Posted on 2020-12-31 by guenni

SicherheitJust a small reminder for users of Windows 8.1 and Windows 10. Adobe and Microsoft will retire the Flash Player today (December 31, 2020) – Flash has reached the end of the product's lifecycle.

Continue reading →

Posted in Security | Tagged | 2 Comments

CheckPoint VPN clients before V E81.20 fails after January 1, 2021 due to expired certificate

Posted on 2020-12-30 by guenni

[German]Are you using an older CheckPoint VPN Client and/or a CheckPoint Endpoint Security Client before version E81.20? Since a certificate expires at the turn of the year, the CheckPoint software in question will no longer work after Jan. 1, 2021. Especially silly: anti-bot, forensics and firewall blade may stop working without being reported. An update has been available since August 2019.

Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Undocumented User in Zyxel Products (CVE-2020-29583)

Posted on 2020-12-30 by guenni

[German]In many Zyxel products (firewalls) there is a vulnerability CVE-2020-29583 in the form of an undocumented user. The manufacturer has since released firmware updates to fix the vulnerability.

Continue reading →

Posted in Security | Tagged | Leave a comment