[German]Microsoft has issued a security advisory for a 0-day vulnerability in Internet Explorer as of January 17, 2020, which affects virtually all versions of Windows (because Internet Explorer is the browser that is present in those versions). There is an issue in the JScript part that could be exploited to remotely execute code. Here is some information, including how to work around it.
[German]Microsoft has updated the Edge Browser to version 79.0.309.68, so that the vulnerabilities present in Chrome (see Chrome 79.0.3945.130) are also fixed in the Chromium Edge Browser. The issue, that Chromium Edge is installed in a wrong language after download seems also be fixed. (via deskmodder.de).
[German]Microsoft's parking garages in Redmond, USA, are in trouble. Their car park control system and servers has been unprotected and accessible via the Internet.
[German] Google's developers have just released Chrome 79.0.3945.130. The browser update closes 11 vulnerabilities in total, but Google don't reaveal details about that.
[German]Another short collection for administrators who use the Citrix ADC (Application Delivery Controller, formerly Netscaler). The CVE-2019-19781 vulnerability has been exploited. In addition, other vulnerabilities and backdoors have been discovered. As there are no firmware updates available yet (coming next week), those affected will have to go back in and take measures to harden against the vulnerabilities and perform additional testing to ensure that the instances are not infected.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]There is a critical vulnerability in the WordPress plugin InfiniteWP Client up to version 1.9.4.4 that allows bypassing authentication. In addition, security researchers have discovered a plugin that allows the mass implementation of user passwords on compromised WordPress installations.
[German]Intel published security advisories on January 14, 2020 on various vulnerabilities in its products. These security advisories refer to fixes or workarounds for vulnerabilities identified in Intel products.
[German]The CyptoAPI vulnerability CVE-2020-0601 in Windows has several proof of concept exploits and is likely to be actively attacked soon. Chrome introduces a check in the browser and there is a test page for this vulnerability.
[German]On January 16, 2020, Microsoft released the Windows 10 Insider Preview Build 19546for insiders in the Fast Ring. Here is some information about it.
[German]The data leak (PussyCash) that security researchers have come across is a database of over 875,000 files that reveal very personal information (from ID card scans to addresses and birth certificates, credit cards, etc.) of erotic models active on adult sites. I was just made aware of this case by the security researchers of vpnMentor.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
