Book: Hacking Multifactor Authentication

Posted on 2020-12-26 by guenni

Book: Hacking Multifactor Authentication[German]A small note for my blog reader. It's such apparent certainties that make us feel 'well secured and taken care of' security-wise. All you need is Multifactor Authentication (MFA) and good security software and everything is secured. As of December 17, 2020, the title 'Multifactor Authentication' by Roger A. Grimes (published by Wiley) is out. Since I frequently writes about security topics here on the blog, I received a copy of the book in advance and read it crosswise a week ago.

Continue reading →

Posted in General | Tagged | Leave a comment

HP ends Free Instant Ink subscription for new customers

Posted on 2020-12-26 by guenni

[German] HP announced recently the end of lifetime Free HP Instant Ink subscription for customers. The Free Instant Ink offer was dedicated to customers with low print volume. After a lot of protest from customers, the program will continue at least for existing customers, but will end for new customers.

Continue reading →

Posted in devices, General | Tagged , , | Leave a comment

Windows 7 SP1/Server 2008/R2: Extended Support 2021 – Part 2

Posted on 2020-12-25 by guenni

win7[German]In my blog post Windows 7 SP1: ESU Support for 2021 – Part 1  I had pointed out that from January 2021 a new ESU license is required to receive further security updates for this operating system. Those who do not have an ESU license (e.g. private users) or do not get it (e.g. because of Windows 7 Home or Windows Server 2008/R2) can use alternative solutions, which I present in part 2.

Continue reading →

Posted in Security, Update, Windows | Tagged , , , , , | Leave a comment

Merry Christmas …

Posted on 2020-12-25 by guenni

to all my blog readers. And always remember: In 365 days it will be Christmas again.
Frost crystals on an iron gate (borncity.com)

Posted in General | Tagged | Leave a comment

0patch fixes CVE-2020-1013 in Windows 7/Server 2008 R2

Posted on 2020-12-24 by guenni

win7 [German]ACROS Security has released a micropatch for the CVE-2020-1013 (WSUS Spoofing, Local Privilege Escalation in Group Policies) vulnerability for Windows 7 and Server 2008 R2 (without ESU license). Here is some information about it.

Continue reading →

Posted in Security, Windows | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Windows 7 SP1: ESU Support for 2021 – Part 1

Posted on 2020-12-24 by guenni

[German]Small reminder for people still running systems with Windows 7 SP1. In January 2021 the support extension for the second year ends. So a little reminder today to renew the ESU license – and I've found a source that offers ESU license keys for 2021.

Continue reading →

Posted in Security, Update, Windows | Tagged , , , , | 5 Comments

Exploit for not full patched Windows 0-day vulnerability CVE-2020-0986

Posted on 2020-12-24 by guenni

[German]Security researchers have proven that a vulnerability patched in Windows in July 2020 is still exploitable. The patch does not close a vulnerability sufficiently, so there is another way to exploit it.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Microsoft's hints for victims of cyberattacks (including Sunburst)

Posted on 2020-12-24 by guenni

[German]Microsoft published two blog posts from its Detection and Response Team (DART). The posts include advice for incident responders on recovering from systemic identity compromises (after Solarigate) and what to do if infected with the Sunburst Trojan.

Continue reading →

Posted in Security | Tagged | Leave a comment

VPN services seized by law enforcement officials

Posted on 2020-12-23 by guenni

[German]Law enforcement officials have seized and shut down, in an international collaboration, VPN services that provided safe havens for cybercriminals. The VPN services were used to conduct ransomware attacks, web skimming operations, spearphishing and account takeovers.

Continue reading →

Posted in Security | Tagged | Leave a comment

Worldwide UDP:443 (EDT) DDOS on Citrix (NetScaler) Gateway

Posted on 2020-12-23 by guenni

[German]Brief information and a question to the Citrix NetScaler administrators. Are you noticing increased UDP:443 (EDT) access to Citrix Netscaler gateway? Currently there is information that a massive DDoS campaign against Citrix NetScaler gateways has been running since December 19, 2020.

Continue reading →

Posted in devices, Security | Tagged | Leave a comment