Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
How to find weak passwords in Active Directory and eliminate them with PowerShell
Advertising – Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate … Continue reading
Pre Auth Remote Command Execution (CVE-2022-36804) in Atlassian Bitbucket
[German]There is a critical remote command execution vulnerability (CVE-2022-36804) in the version management for software development projects, Atlassian Bitbucket. Atlassian had already published a security advisory and a product update for the vulnerability, which was rated critical, at the end … Continue reading
Lexmark firmware update closes vulnerability and fixes Windows printer issue
[German]Good news for owners of Lexmark printers. The manufacturer has finally provided the firmware updates for various models. On the one hand, these are supposed to eliminate a vulnerability in more than a hundred Lexmark printer models, which Lexmark already … Continue reading
Rockstar Games leak: source code and many game videos published after hack
[German]Game developer Rockstar Games was hacked. Now a user on GTAForums has posted 90 video taken from a test build of Grand Theft Auto 6. The hacker also claims to have the source code of GTA 5 and 6. The … Continue reading
Data wiped in IHG hack for revenge, Vietnamese couple says
[German]More information on the hack of InterContinental Hotels Group PLC (IHG) a few weeks ago. What was originally planned as blackmail then led to the deletion of extensive data when the blackmail went wrong. This is what a couple from … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Chrome & Edge may send personal data (including passwords) to Google and Microsoft respectively
[German]Unpleasant discovery that a security researcher has made public the days. The Google Chrome browser, and also the Chromium-based Microsoft Edge browser, may transmit in some cases personal data from forms to Google and Microsoft (in the case of Edge). … Continue reading
LastPass confirmed: Attackers had access to internal systems for four days
[German]The developers of the web-based password manager online service LastPass announced this week that attackers had access in August 2022 to internal systems for four days. Then the unauthorized access has been detected. However, the attackers probably did not succeed … Continue reading
GhostSec targets again water hygiene
[German]In early September, OTORIO reported that the GhostSec hacktivist group had penetrated 55 Berghof PLC systems in Israel. Now the hacktivist group published another report claiming to have successfully penetrated more industrial control systems. OTORIA provided me with some information … Continue reading
Bitdefender has released a Decryptor for LockerGoga encrypted files
[German]Small note for people who have fallen victim to LockerGoga ransomware. Bitdefender has informed me that the company has released a universal decryptor. This allows victims of all previous LockerGoga ransomware attacks to recover their encrypted files. Europol, the NoMoreRansom … Continue reading
Update for Exchange Extended Protection script, but still errors
[German]August 2022 security updates for Microsoft Exchange (on-premises solution) requires, to enable Extended Protection (EP) to close all vulnerabilities. The activation is done via script, which Microsoft provided – but this script caused isses. Now Microsoft has released an updated … Continue reading