Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Lockbit attackers abuse Windows Defender to load Cobalt Strike
[German]Security researchers from Sentinel One have discovered an interesting attack path under Windows, which is used by the ransomware gang Lockbit. The group uses Windows Defender in its ransomware construction kit to load the Cobalt Strike test tool and then … Continue reading
Remote access Trojan "Woody Rat" uses Follina exploits to attack Russian organizations
[German]Malwarebytes' threat intelligence team has identified a new, technically advanced remote access Trojan. Dubbed "Woody Rat," the Trojan has been in circulation for about a year and targets Russian organizations. Among others, Obyedinyonnaya Aviastroitelnaya Korporatsiya (OAK), an aerospace and defense … Continue reading
Critical RCE Vulnerability CVE-2022-32548 in DrayTek Vigor Routers
[German]Brief note for administrators and users who may be deploying Vigor routers in their environment. Security researchers have come across a critical Remote Code Execution vulnerability (RCE) that allows attackers to take over the router. DrayTek has provided a corresponding … Continue reading
Microsoft finds AiTM phishing campaign that also leverages 2FA
[German]A small follow-up on security for online accounts using two-factor authentication (2FA). Microsoft's security teams have encountered a large-scale AiTM phishing campaign that attempted to attack more than 10,000 organizations since September 2021. The campaign involved stealing passwords, hijacking the … Continue reading
Security & cyber attacks: Semikron, MBDA, Peter Berghaus GmbH and more
[German]The last few hours have seen another rash of cyber attacks on companies and government agencies. Semikron, a German manufacturer of power semiconductor components has fallen victim to a ransomware attack. Peter Berghaus GmbH, a manufacturer of traffic technology and … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
VMware: Security Adversory, Windows 11 TPM Issue
[German]Brief note for VMware users and administrators. The vendor has published a security advisory for various products (VMware Workspace ONE Access, etc.) as of August 2, 2022, because there are numerous vulnerabilities there. In addition, I still came across an … Continue reading
Pipline and electricity operator Creos Luxembourg victim of BlackCat ransomware
[German]In Luxembourg, the company Creos has fallen victim to the Alphv ransomware gang (better known as BackCat). Creos operates both a gas pipeline and electricity supply in the Grand Duchy. This was made public by a release from the Alphv … Continue reading
Windows Server 20H2 reaches end of support in August 2022
[German]Another short announcement at the end of the month, which I'm not sure will reach anyone else in the readership. Microsoft Windows Server 20H2 will receive security updates for the last time on August 9, 2022, i.e. in a few … Continue reading
Cyberattack cripples U.S. managed service provider NetStandard on 7/26/2022
[German]On July 26, 2022, U.S. managed service provider NetStandard was arguably the victim of a successful cyberattack. The attack resulted in the company having to shut down its MyAppsAnywhere cloud services, consisting of hosted Dynamics GP, Exchange, Sharepoint and CRM … Continue reading
SysAdmin Day: The cloud, security and backup risks
[German]Today, July 29, is the International Day of the System Administrator, a day for all the IT professionals who do their best every day to somehow keep the IT systems running and secure against cyber threats. I assume that this … Continue reading