[German]The Windows version of Cisco AnyConnect Secure Mobility client has a vulnerability in it's auto update, that can be misused for privilege escalation. A patch is available.
Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Cisco AnyConnect Secure Mobility Client Vulnerability CVE-2020-3153
0-day Exploits in iOS Mail
[German]Security researchers have found two 0-day exploits in virtually all iOS versions (iOS 6 through 13) that allow remote code execution (RCE) via mail. The vulnerabilities are likely to be actively exploited.
Windows 10 V2004 (Build 19041.208 in Insider Slow Ring)
[German]As of April 22, 2020, Microsoft has released a cumulative update (KB4558244) for the Windows 10 version 2004 for insiders in the slow ring. This update raises the build to 19041.208. It fixes an issue that prevents NPLogonNotify API notifications from being sent from the Credential Provider Framework. The announcement was published in the Windows Blog.
0patch fixes CVE-2020-0687 in Windows 7/Server 2008 R2
[German]ACROS Security has released a micropatch for the memory corruption vulnerability CVE-2020-0687 in TTF fonts for Windows 7 and Server 2008 R2 (without ESU).
Posted in Security, Windows
Tagged 0patch, ESU, Security, Windows 7, Windows Server 2008 R2
Leave a comment
Windows 10 Insider Preview Build 19613 (Fast Ring)
[English]On April 22, 2020, Microsoft released the Windows 10 Insider Preview Build 19613.1000 (20H2 development branch) for insiders in the Fast Ring. Microsoft describes in the Windows Blog the new features, bug fixes and known issues of this build.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Four 0-day Exploits in IBM Data Risk Manager
[German]Security researchers have just revealed four unpatched vulnerabilities in IBM Data Risk Manager. The vulnerabilities were reported to IBM, but IBM rejected the report due to lack of formal requirements. Three vulnerabilities are considered critical.
Chrome 81.0.4044.122 with security fixes released
[German]Google released the update to Chrome 81.0.4044.122 on April 21, 2020. This is an unscheduled security update which closes several (critical) vulnerabilities.
Microsoft Security Advisories April 14, and 21, 2020
[German]Microsoft has published Security Advisories for a critical RCE vulnerability (CVE-2020-0905) in Microsofts Dynamics Business Central. And there are security advisories for an update to the Autodesk FBX Library and for an OpenSSL Remote Denial of Service vulnerability.
Posted in Security, Software, Update
Tagged ADV200004, ADV200007, CVE-2020-0905, Security, Software
Leave a comment
Sophos Firmware Sophos UTM 9.703 re-release this week?
Brief information for users of Sophos UTM. In mid-April 2020, in the article Stop: Don't install Sophos UTM 9.703 Firmware, I reported that the firmware update was pulled due to issues. Users should not install this update. Sophos has updated now it's advisory and acknowledged the errors. A revised firmware is now in tests – if that shows no problems, a revised version of the firmware will be available this week. I have added details in the linked article. Thanks to Thorsten for pointing this out.
Windows 10 and Windows 8.1 Updates (April 21, 2020)
[German]On April 21, 2020, Microsoft released a monthly preview rollup for Windows 8.1 as well as optional updates for various Windows 10 versions. Here is an overview about these optional updates.
Posted in Update, Windows
Tagged KB4550944. KB4550947, KB4550945, KB4550958, KB4550969, Updates, Windows 10, Windows 8.1
Leave a comment