[German]Was sloppiness or at least a lax security culture at the US software manufacturer SolarWinds possibly responsible for their compromised updates of the Orion products, that has been shipped for months with the SUNBURST Trojan? This Trojan has been used to hack numerous US government agencies and the security vendor FireEye in recent months. Here is a look into a security abyss …
Microsoft has released Windows 10 Insider Preview build 20279 for Windows Insiders in the Developer Channel as of December 14, 2020. This build is largely identical to build 20277, which was released on December 10, 2020. Microsoft wants to test upgrade options to other builds. Windows Insiders who upgraded to build 21277 (RS_PRERELEASE) will not be offered this build because they are on a newer build. The announcement was made on the Windows blog, where you can read about fixes and known issues, as well as other details.
[German]Windows 10 20H2 administrators using VMware ThinApp should beware. I have received feedback from users that after installing update KB4592438, VMware ThinApps no longer starts. Here's an overview, what I know so far.
Security Researchers from Website Planet found, that an UK Tax Relief Company Exposes Customers' Personal Information due to a misconfigured web server. Here are a few details about this Data Leak.
[German]Suspected state hackers have succeeded in tampering with SolarWinds' widely deployed networking and security products worldwide. Through a supply chain attack, a Trojan or the SunBurst backdoor was rolled out with a software update.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]According to a report, the U.S. Treasury Department and another U.S. agency responsible for Internet and telecommunications have fallen victim to a sophisticated cyber attack. Suspected government hackers were able to pull documents. Addendum: It seems, that a backdoor in Solarwinds' products was the vulnerability used for the hacks.
[German]Users of iPhones running iOS 14 are complaining that they are not getting notifications for incoming SMS text or iMessages messages. This appears to be a bug in iOS 14 that can also affect notifications from other apps.
[German]Security experts from IoT-Inspector have tracked down a total of 7,339 dangerous vulnerabilities in popular gifts such as connected children's toys, smart speakers or hobby drones. In terms of security, that's likely to be the collective horror under the Christmas tree. Products from well-known manufacturers are also represented.
[German]Microsoft's Windows 10 version 1903, released in spring 2019, has now reached the end of support. Systems still running this Windows 10 version will now be migrated to newer Windows 10 versions in unmanaged environments.
[German]The Microsoft 365 security team points out a malware campaign called Adrozek. The malware targets popular browsers such as Google Chrome, Microsoft Edge, Firefox, etc. and tries to manipulate the browser in such a way that advertisements are played during a search. Through this approach, those behind it try to generate revenue. Europe seems to be particularly affected.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
