Edge’s Secret Trick Breaks Internet Explorer's Security

[German]The 0Patch team has developed a micropatch to close a 0-Day Information Disclosure vulnerability in Internet Explorer 11 on Windows 10. This vulnerability allows Windows attackers to access files and upload them from the user's system to their own servers. It is caused by an undocumented Edge feature that breaks IE 11's security under Windows 10.

Continue reading

Posted in browser, Security, Windows | Tagged , , , | Leave a comment

Vulnerability in Broadcom’s WiFi drivers, million devices at risk

[German]A major vulnerability in Broadcom's WiFi drivers enables remote code execution and threatens millions of computers, smartphones, tablets and IoT devices.

Continue reading

Posted in devices, Security | Tagged | Leave a comment

Windows Live-Tile takeover from security researcher

[German]Windows 10 Windows 10 (but also Windows 8.x) use Live tiles in Apps to display content in the Start menu. German security researcher Hanno Böck was able to takeover the subdomain for the corresponding service and was able to display any content on the Live tiles in the start menu.

Continue reading

Posted in Security, Windows | Tagged , , | Leave a comment

Windows patchday issues–one week later (April 17, 2019)

[German]One week after Microsoft released Windows security updates causing install issues, the situation for victims are not clear. Here's an overview, what we know so far. Addendum: Avira has updated its knowledge base article, I've added that information.

Continue reading

Posted in issue, Update, Windows | Tagged , , | 4 Comments

Adblock Plus filter can be exploited for malware attacks

[German]The Adblock Plus extension (or it's filters) used in browsers can be misused to inject malware or manipulated what's displayed. This is difficult to detect, says a security researcher who has now now publicy disclosed this vulnerability. Eyeo, the developer of Adblock Plus has announced to remove the risky feature.

Continue reading

Posted in Security | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Windows vulnerability CVE-2019-0859 is exploited

[German]In April 2019, Microsoft closed the CVE-2019-0859 vulnerability in Windows with a security update. Kaspersky security researchers have observed multiple attacks attempting to exploit this vulnerability in Windows 7 to 10.

Continue reading

Posted in Security, Windows | Tagged , | Leave a comment

Useless Media Creation Tool for Windows 10 V1903 released

There are reports, an updated version of Microsoft's Windows Media Creation Tool (MCT) has (allegedly) appeared, which can be used to create an installation medium for Windows 10. Unfortunately this MediaCreationTool1903.exe program still won't download the install image of Windows 10 May 2019 Update (V1903). Instead it downloads the old Windows 10 V1809 build – despite the name is MediaCreationTool1903.exe.

Posted in Windows | Tagged | 8 Comments

Is Microsoft's Outlook.com hack worse than admitted?

[German]The access of unauthorized third parties to Microsoft's email services such as outlook.com or hotmail.com was deeper than Microsoft first admitted. More details are slowly coming to light.

Continue reading

Posted in Security, Software, Windows | Tagged , , , | Leave a comment

Windows 10 V1903 has issues with AMD Raid drivers

[German]Users of AMD systems should take care when using Windows 10. Currently it is not possible to install Insider Previews builds of Windows 10 May 2019 update, because the raid drivers cause issues and prevent an upgrade.

Continue reading

Posted in Windows | Tagged | 8 Comments

Microsoft’s mail services (outlook.com, hotmail.com) hacked

Microsoft's email services were hacked and attackers could access email accounts (@msn.com, @hotmail.com, @outlook.com, etc.) of users of these services. Microsoft has confirmed the hack.

Continue reading

Posted in Security | Tagged | Leave a comment