Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
CPUID Enumerator and Decoder: Virus-free, but flagged by Virustotal
[German]Within this blog post I will outline the risk, users are facing by trusting anti virus scanners. Security expert Stefan Kanthak outlined a case to me, that shows, that you can't trust most virus scanners. Sometimes the don't detect malicious … Continue reading
Dell Windows drivers still vulnerable to kernel attacks
[German]Users of Dell systems are still at risk of having their Windows systems compromised via Dell drivers through kernel attacks. The problem was supposed to be fixed by updates as early as May 2021. However, security researchers from Rapid7 are … Continue reading
Analysis: How TeamTNT compromises Docker Hub accounts
[German]Security vendor Trend Micro has published a report highlighting how threat actor TeamTNT is going about compromising Docker Hub accounts. This is a follow up article, after they wrote about compromised Docker hub account abused for crypto mining. If anyone … Continue reading
Microsoft Security Update Revisions Dec. 14./16. 2021
Microsoft released some Security Update revisions to vulnerabilities on December 14 and 16. I am simply posting the relevant information as an uncommented addendum on the blog for your information.
Log4j-News (2021/12/18)
[German]The log4j vulnerability CVE-2021-44228 keeps sending shockwaves through the IT scene. Latest reports say that a majority of companies have not patched the vulnerability in their software. In addition, a new DoS vulnerability has been found in the library, for … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Sennheiser discloses customer data via old cloud instance
[German]Audio gigant Sennheiser was victim of a data protection incident. Sennheiser (audio technology left an old cloud account unprotected on the Internet so that third parties could access customer data. Security researcher found the open Amazon AWS S3-Bitbucket and informed … Continue reading
Insides on Ireland's health service executive ransomware case in May 2021
[German]In May 2021, there was a ransomware attack on Ireland's Health Service Executive (HSE). PricewaterhouseCoopers recently provided an analysis of what went wrong. Below I briefly compiled the findings of the investigation from that case.
Update fixes Windows AppX installer 0-day vulnerability CVE-2021-43890 (used by Emotet)
[German]Another addendum from the December 2021 patchday regarding the AppX installer used in Windows. Microsoft has closed the Windows AppX Installer spoofing vulnerability CVE-2021-43890 with an update. The Emotet gang has been trying to exploit this vulnerability to infect systems … Continue reading
Posted in Security, Update, Windows
Tagged Patchday 12.2021, Security, Update, Windows
Leave a comment
Frequent login attempts on routers (FRITZ!Box)
[German]Currently, owners of Internet routers – especially FRITZ!Box routers – are noticing recurring login attempts on their devices. At least, some readers have contacted heise with corresponding observations. And also during a short research I came across postings reporting access … Continue reading
Patchday: Windows 11 Updates (December 14, 2021)
[German]On December 14, 2021 (second Tuesday of the month, Patchday at Microsoft), Microsoft has also released a cumulative update for Windows 11, which was released on October 5, 2021. The update is supposed to fix various issues. Here are some … Continue reading
Posted in Security, Update, Windows
Tagged Patchday 12.2021, Security, Update, Windows 11
Leave a comment