Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Cisco fixes critical authentication bypass vulnerability CVE-2021-34746
[German]A vulnerability (CVE-2021-34746) was recently found in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco's Enterprise NFV Infrastructure software. This is a solution designed to virtualize network services for easier management of virtual network functions (VNFs). The CVE-2021-34746 … Continue reading
HomeOffice and Smart-Home as a gateway for hacks into corporate networks
[German]In times of the coronavirus pandemic, more people are working in their home offices but accessing company computers remotely. On the other hand, more and more IoT devices are finding their place in the home environment as part of smart … Continue reading
FBI and CISA warns: Ransomware attacks on weekends and holidays
[German]The US security agency CISA and the FBI have issued a warning stating that ransomware gangs are now targeting weekends and holidays for their attack campaigns. This tends to thin out IT staff to monitor networks, and attacks are not … Continue reading
Juniper: RealTek vulnerabilities CVE-2021-35394 and CVE-2021-35395 are attacked in the wild
[German]Security researchers from Juniper Networks are sounding the alarm. Already since the first week of August 2021, model and routers from the manufacturer Arcadyan (installed in many OEM devices) have been attacked via vulnerability CVE-2021-20090. Now, attacks on vulnerability CVE-2021-35394 … Continue reading
Mass Scanning and Attacks on Confluence Enterprise Server
[German]A brief message for administrators of Confluence Enterprise servers. There is a critical vulnerability in this collaboration product that is being exploited. Currently, security researchers are detecting mass scans on the Internet for servers with the vulnerability in question. Here … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Microsoft Defender for Endpoint Plan 1
[German]Ransomware is the biggest threat to businesses – and smaller companies in particular often lack the resources for a security solution. Microsoft has therefore introduced a new subscription for its antivirus solution Microsoft Defender for Endpoint. The so-called Plan 1 … Continue reading
Meltdown-like vulnerability in AMD Zen+ and Zen 2
[German]Security researchers have uncovered a vulnerability in AMD Zen+ and Zen 2 CPUs that is similar to the Meltdown vulnerability in Intel processors. AMD has created a mitigation guide for the vulnerability and published details on how the vulnerability works.
Exchange Server: Authentication bypass with ProxyToken
[German]In the April 2021 cumulative updates, Microsoft fixed a vulnerability in its on-premises Exchange servers that allowed attackers to change configuration without authentication. This would have allowed an unauthenticated attacker to change the configuration for mailboxes of arbitrary users. This … Continue reading
Master decryptor key published
[German]Victims of the Ragnarok ransomware, whose data was encrypted during an attack, can hope again. After the cyber-criminal has just ceased its operations, the master decryptor key has been published. With it, the encrypted files should be able to be … Continue reading
Azure: Thousands of customers threatened by ChaosDB vulnerability in Azure Cosmos DB
[German]Heavy blow for users of the Microsoft Azure cloud if a Cosmos DB is involved (the DB stands for Data Breach, just no one has noticed yet). There was a severe vulnerability (now closed) that allowed attackers to take over … Continue reading