Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Ubiquiti hack more serious than admitted
[German]The hack of US manufacturer Ubiquiti Networks (IoT devices, cameras, etc.) that became known in January 2021 was probably more serious than the company admitted. The attackers are said to have had access to source codes and credentials. Addendum: Statement … Continue reading
Exchange hack news: What's about risk? (April 1, 2021)
[German]What is the threat situation at the end of March 2021 with regard to on-premises Exchange Server and the exploitation of the vulnerabilities that became known at the beginning of March 2021? Microsoft has provided analyses of which ransomware groups … Continue reading
Google Chrome 89.0.4389.114 fixes 8 vulnerabilities
[German]Google has released Google Chrome 89.0.4389.114 on March 30, 2021. The browser should be updated promptly, as Google closes eight vulnerabilities. Here's a brief overview.
SolarWinds: Update for Orion software; attackers had access to top DHS accounts
[German]Small update on the SolarWinds hack. The attackers probably had access to the emails of top people of the US Homeland Security (DHS). And the manufacturer SolarWinds has released a security update for its Orion software, which closes a new … Continue reading
PHP Git server hacked – RCE backdoors injected into code
[German]There seems to have been a successful supply chain attack on the official Git server of the PHP project. The attackers managed to upload an unauthorized update to insert a secret backdoor into the source code.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Vulnerabilities in Foxit Reader and Phantom PDF
Security researchers has found vulnerabilities in Foxit Reader and Phantom PDF. The Windows versions can be attacked by crafted images, according to this security bulletin from the vendor. However, there are updates to Foxit Reader 10.1.3 and Foxit PhantomPDF 10.1.3 … Continue reading
Technical University Darmstadt Victim of Ragnarok Ransomware?
[German]Has TU-Darmstadt fallen victim to a Ragnarok ransomware attack? At least that is what information I received from a security researcher suggests.
Windows 10: New SSU KB5001205 fixes Secure Boot issues
[English]Microsoft has released a new Servicing Stack Update (SSU) for Windows 10. The SSU KB5001205 is supposed to fix a vulnerability in the fixt Security Boot. This vulnerability was torn open by a previous update for the Security Boot.
Microsoft Defender automatically mitigates CVE-2021-26855 on Exchange Server
[German]Microsoft is taking the next step in securing on-premises Exchange installations. Microsoft Defender not only detects infections of a system as a result of the ProxyLogon vulnerabilities. The virus scanner can also automatically detect a vulnerable system and closes the … Continue reading
Exchange ProxyLogon News: Patch status, new PoC and new findings (03/18/2021)
[German]Regarding the Exchange ProxyLogon vulnerabilities and the mass hack of Exchange Server systems, there is a publicly available proof of concept (PoC), so new attacks are to be expected. Patching and securing is progressing slowly. Microsoft's testing scripts should be … Continue reading