Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Windows: Create and detect hidden user accounts
[German]Today a short article about a security topic I recently came across by chance. It's about the possibility to create hidden but active user accounts under Windows via net user command. This ability is increasingly being exploited by malware to … Continue reading
German security researcher hacked Apple's AirTag
[German]A German security researcher has managed to break into the firmware of Apple's AirTag controller, dump it and then manipulate it after a few attempts. This allowed the security researcher to display a YouTube video on the phone to users … Continue reading
Ransomware attack on US pipeline operator (May 2021)
[German]The last few days have again seen spectacular cases of ransomware infections on companies and organizations. The biggest case occurred last Thursday in the U.S., where the largest U.S. pipeline company had to shut down its operations after a successful … Continue reading
Audacity and its telemetry: New management's middle finger to the community
[German]Open source enthusiasts are currently on the barricades, because Audacity has a new management. And this has simply given the audio player a set of functions for telemetry data collection. This does not go down well with the community, which … Continue reading
PoC for Microsoft Exchange bug discovered by NSA public
[German]Various security vulnerabilities in Microsoft Exchange were discovered by the US intelligence agency NSA and reported to Microsoft. Microsoft closed these vulnerabilities in April 2020 with corresponding updates. As a "reminder for the weekend", we would like to point out … Continue reading
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
0patch fixes Windows Installer LPE-Bug (CVE-2021-26415)
[German]ACROS Security has released a micropatch for the CVE-2021-26415 vulnerability in Windows Installer. This vulnerability was patched by Microsoft in April 2021 via a security update. The 0patch solution is for people who do not have an ESU license.
Microsoft: Data of European companies/authorities remain in Europe
[German]Microsoft is responding to the fact that there is no legal basis for data exchange between European customers and the US. Therefore, Microsoft plans to adapt its products so that in the future, at some point, the data of European … Continue reading
Windows driver with vulnerabilities (CVE-2021-21551) puts millions of Dell systems at risk
[German]Several vulnerabilities have been discovered in a driver that has been installed on millions of Dell consumer and enterprise Windows systems over the past 12 years. These vulnerabilities allow an attacker to perform privilege escalation. In other words, the vulnerability … Continue reading
Credit Scores of Americans are exposed via Experian API
[German]The Credit Scores of Millions of Americans has been exposed via a faulty API of credit reporting company Experian, as Krebs on Security reported here. A name and an email address was sufficient, to snoop into the credit score of … Continue reading
Swiss Cloud AG victim of a cyber attack (April 2021)
[German]Swiss cloud provider, Swiss Cloud AG, fell victim to a cyber attack at the end of April 2021 – according to my information, it was a ransomware attack that brought the company to its knees. Here is a rough overview … Continue reading