In late December 2020, I had blogged about an undocumented user in Zyxel products (CVE-2020-29583), see my the blog post Undocumented User in Zyxel Products (CVE-2020-29583). The vendor has provided an update to remove this undocumented user that's a backdoor. Now I read that cyber criminals are actively scanning the Internet for vulnerable Zyxel products to exploit the backdoor.
[German]Microsoft will end support for root certificates with kernel-mode signing capabilities in the Microsoft Trusted Root program in the first half of 2021. This means that cross-signed drivers from vendors, that have not been updated, will no longer be able to be loaded or installed under Windows 10.
[German]Quick information for administrators who still maintain Windows 7 systems and need an ESU license for 2021. Renewal licenses are now available and are starting to ship.
[German]Google is changing its terms of use for Google accounts (Gmail, Google Drive) etc. as of June 1, 2021. This also affects the question of what happens when such an account is not used for a longer period of time. Here is a brief overview of this issue.
[German]On January 5, 2021(first Tuesday of the month, Office Patchday) Microsoft released several non-security updates for versions of Microsoft Office that are still supported. Here is a brief overview.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On January 14, 2020, one year ago, support with security updates for Windows 7 expired for most users. But millions of systems continue to run this operating system version and are connected to the Internet. Microsoft provides security updates till January 2023 for some users. Here's a quick look at that issue.
[German]Slack, a web-based instant messaging service provider, experienced a massive global disruption on January 4, 2021. Users experienced login issues and were unable to use the service.
[German]More and more details about the SolarWinds hack are coming to light, and more and more questions are surfacing. There are a large number of people affected, raising the question of the attackers' targets. In addition, questions are growing louder about why the early warning systems in the U.S. did not kick in, and whether outsourcing to SolarWinds dependencies in Eastern Europe made the attack possible in the first place.
[German]To kick off 2021, I'd like to take a quick look at cybersecurity trends. What can we expect in the next 12 months in this regard, especially after many tasks were moved to the home office in 2020 as part of the Covid 19 pandemic.
[German]A brief note for admins responsible for security in Active Directory structures and 'secure workstations'. Microsoft has retired the Enhanced Security Admin Environment (ESAE) architectural approach to securing AD computer structures.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
