[German]Microsoft published two blog posts from its Detection and Response Team (DART). The posts include advice for incident responders on recovering from systemic identity compromises (after Solarigate) and what to do if infected with the Sunburst Trojan.
[German]Law enforcement officials have seized and shut down, in an international collaboration, VPN services that provided safe havens for cybercriminals. The VPN services were used to conduct ransomware attacks, web skimming operations, spearphishing and account takeovers.
[German]Brief information and a question to the Citrix NetScaler administrators. Are you noticing increased UDP:443 (EDT) access to Citrix Netscaler gateway? Currently there is information that a massive DDoS campaign against Citrix NetScaler gateways has been running since December 19, 2020.
[German]In the consumer sector, intelligent doorbell cameras have been davertised and have also been bought heavily. Now someone has taken a closer look at some of these "doorbells" from security aspects … and found the expected results.
[German]Mozilla developers have released version 84.0.1 of the Firefox browser on December 22, 2020. This is a maintenance update for the browser. Here is an overview of the fixes. Continue reading
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]I'm bringing up again a hanging topic 'expiring certificates'. At the end of the year, some root certificates expire. However, these may not be deleted under Windows under any circumstances, since otherwise it comes to problems.
[German]Brief security information to the readership. After being somewhat quiet over the past few weeks, a new malware/ransomware campaign from the Emotet group seems to be ramping up for the holidays.
[German]Security researchers and forensic experts have found two other malware variants, Supernova and CosmicGale, in systems infected with the SunBurst Trojan via SolarWinds Orion software. Security researchers suspect that there is a second hacking group at work.
[German]The hack of many US agencies and companies via the SUNBURST backdoor, executed by hackers suspected to be close to the state, is drawing wider circles. It was probably uncovered by accident, US President Trump is pointing the finger at the Chinese, and Microsoft is providing more detailed analysis. Here is a brief overview.
[German]It worked, the bug I reported about chkdsk ending in an unbootable Windows 10 2004/20H2 on some systems has been fixed. At least that's what the descriptions of update KB4592438 say. Here is a more in depth story about that.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
