[German]A poorly patched vulnerability CVE-2019-0887 in Windows makes the systems vulnerable to attacks via third-party RDP applications. It could also allow a client used to establish the RDP connection to be attacked by malware on the remote machine.
[German]Microsoft Germany has send a cease and desist to Berlin's Commissioner for Data Protection and Freedom of Information. An action that leaves many observers somewhat speechless. The warning concerns guidelines for video conferencing, which provide information on test criteria for the safe use (also GDPR) of videoconferencing in companies and public authorities.
[German]Microsoft ships a tool (Packet Monitor) in Windows 10 that allows administrators to monitor and record network traffic. This has only now become more widely known, possibly because the feature was described a few days ago for insiders.
[German]The REvil/Sodinokibi gang has seized files from the US law firm Grubman Shire Meiselas & Sacks and demanded a ransom. Since the law firm is not paying, the first e-mail about US President Donald Trump has now been published.
[German]There is new evidence that Microsoft has already begun to integrate features that are scheduled for the autumn update (development branch 20H2) into the Windows 10 version 2004 (May 2020 update), which is expected to be released for general release at the end of May 2020. This means that Windows 10 20H2, which is expected to be released in the fall, will again be a 'minor update'.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]There are serious vulnerabilities in older versions (before 14.3) of Endpoint Protection and Endpoint Protection Manager for Windows that allow the system to take over. Symantec has released updates for these products.
[German]Security researchers have discovered three vulnerabilities in Cyberoam firewalls (owned by British company Sophos). The vulnerabilities leave millions of devices and, in principle, the entire network vulnerable to security attacks. The products are used in corporate networks and are accessible via the Internet (sometimes with standard credentials).
The video conference service Zoom experienced a major outage a few hours ago and the service was no longer available. In the meantime, Zoom seems to have fixed the issue.
[German]The takeover of a domain controller by stolen admin passwords is a popular approach of cyber criminals. I stumbled upon an article on Twitter, explaining where attackers could find passwords on SYSVOL and via GPO preferences.
[German]Several high-performance computers in Europe were attacked by cyber criminals and have since been taken down (means offline from the internet). It is not yet entirely clear what the target of the attack was. Addendum: It seems, the attackers mined crypto currency.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
