[German] Intel has issued a security advisory on March 10, 2020, in which vulnerabilities in various products and available updates are pointed out. A critical vulnerability is found in a graphics driver.
The WordPress plugin 'Import Export WordPress Users' is used on over 30,000 websites, but contains a vulnerability in older versions. The vulnerability, discovered on February 26, allowed anyone with access at subscriber level or higher to import new users via a CSV file, including users at administrative level. An update of the plugin closes the vulnerability – more details can be found in this WordFence article.
[German]The EU Commission wants to take action against the waste and also electronic devices waste, i.e. appliances that are left without updates shortly after market launch, or devices which are broken just after end of warranty and then be thrown away. Sustainability for smartphones and notebooks as well as the reduction of waste in general, including the 'right to repair' of things is on the agenda and should become law.
[German]As of March 10, 2020 (second Tuesday of the month, patchday at Microsoft), Microsoft has released several security relevant updates for still supported Microsoft Office versions and other products.
[German]On March 10, 2020, Microsoft had a patchday and the company released some security updates. First users are already reporting issues with the security updates.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]A short tip note for administrators on enterprise networks who want to verify that Windows servers are vulnerable to the unpatched SMBv3 vulnerability CVE-2020-0796. There is a Pyton script for this purpose.
[German]There is a serious but unpatched vulnerability in the SMBv3 network protocol in Windows. This could allow the spread of worms, but is not currently exploited. Microsoft provided the information in a security advisory yesterday.
[German]Microsoft has been successful to overtake the US-based parts of the infrastructure of the Necurs botnet. The company has just announced this coordinated action with partners across 35 countries, that has disrupted the Necurs botnet.
[German]On March 10, 2020 (second Tuesday of the month, Patchday at Microsoft) several cumulative updates for the supported Windows 10 builds were released. Here are some details about the respective updates.
[German]On March 10, 2020, Microsoft released various (security) updates for Windows 7 SP1 (ESU) and other updates for Windows 8.1 and the corresponding server versions. Here is an overview of these updates.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
