Tag Archives: Security

FAQ and script for secure boot protection against CVE-2023-24932 (Black Lotus)

[German]Microsoft has been trying for some time to secure the Secure Boot in Windows against the Black Lotus Boot Kit vulnerability CVE-2023-24932. Below is a short summary or FAQ, including the certificate to be exchanged in the boot media. And … Continue reading

Posted in Security, Windows | Tagged , | Leave a comment

Advertising

Vulnerabilities in DigiEver DVRs are being exploited, no patch available

[German]DigiEver from Taiwan offers IP video surveillance based on Linux. Security researchers from TXOne discovered RCE vulnerabilities in DigiEver products back in July 2023. The provider does not provide updates because the devices have reached the end of support. Since … Continue reading

Posted in devices, Security | Tagged , | Leave a comment

Fraud scam for WhatsApp contact requests

[German]Brief information for WhatsApp users among our readership (or to pass on to these users). The Lower Saxony Criminal Police Office (LKA) is warning of a new scam targeting WhatsApp users in Dec. 2024 and asking them to check their … Continue reading

Posted in Security | Tagged | Leave a comment

Vulnerability CVE-2025-0514 in LibreOffice – Fix with LibreOffice 24.8.5

[German]The LibreOffice developers have released LibreOffice 24.8.5 to close a link vulnerability CVE-2025-0514. The vulnerability could allow links to be abused. Advertising

Posted in Office, Security, Software | Tagged , | Leave a comment

Windows 10/11 and Server hardening: Timeline for 2025 and beyond

[German]A quick reminder that Microsoft is getting serious about hardening Windows clients and servers for the Kerberos protocol as early as February 2025. Microsoft has also introduced a string length limit to the Kerberos policy for host names. Here is … Continue reading

Posted in Security, Windows | Tagged , | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Multiple vulnerabilities in OpenSSH (Feb. 2025)

[German]Security experts from Qualys TRU have discovered two vulnerabilities in the OpenSSH software. In addition, an advisory on another vulnerability was published on February 11, 2024. OpenSSL 3.4, 3.3 and 3.2 are affected by this vulnerability, although upgrades to newer … Continue reading

Posted in Security, Software | Tagged , , | Leave a comment

Advertising

Patchday: Microsoft Office Updates (February 4 and 11, 2025)

[German]On February 11, 2025 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Updates were also released for February 4, … Continue reading

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Patchday: Windows Server-Updates (February 11, 2025)

[German]On February 11, 2025 (second Tuesday of the month, Patchday at Microsoft) various cumulative updates were released for the supported versions of Windows Server. Below I have extracted the provided updates including some details for these Windows Server versions (from … Continue reading

Posted in Security, Update, Windows | Tagged , , , | Leave a comment

Advertising

Patchday: Windows 10/11 Updates (February 11, 2025)

[German]On February 11, 2025 (second Tuesday of the month, Patchday at Microsoft), Microsoft also released cumulative updates for the still supported versions of the client operating systems Windows 10 and Windows 11. Here are some details about these updates, which … Continue reading

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment

Microsoft Security Update Summary (February 11, 2025)

[German]On February 11, 2025, Microsoft released security updates for Windows clients and servers, for Office – and for other products. The security updates eliminate 55 vulnerabilities (CVEs), three of which are classified as critical and four as 0-day. Below is … Continue reading

Posted in Office, Security, Software, Update, Windows | Tagged , , , , | Leave a comment