Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Google Chrome 89.0.4389.114 fixes 8 vulnerabilities
[German]Google has released Google Chrome 89.0.4389.114 on March 30, 2021. The browser should be updated promptly, as Google closes eight vulnerabilities. Here's a brief overview.
SolarWinds: Update for Orion software; attackers had access to top DHS accounts
[German]Small update on the SolarWinds hack. The attackers probably had access to the emails of top people of the US Homeland Security (DHS). And the manufacturer SolarWinds has released a security update for its Orion software, which closes a new … Continue reading
PHP Git server hacked – RCE backdoors injected into code
[German]There seems to have been a successful supply chain attack on the official Git server of the PHP project. The attackers managed to upload an unauthorized update to insert a secret backdoor into the source code.
Vulnerabilities in Foxit Reader and Phantom PDF
Security researchers has found vulnerabilities in Foxit Reader and Phantom PDF. The Windows versions can be attacked by crafted images, according to this security bulletin from the vendor. However, there are updates to Foxit Reader 10.1.3 and Foxit PhantomPDF 10.1.3 … Continue reading
Technical University Darmstadt Victim of Ragnarok Ransomware?
[German]Has TU-Darmstadt fallen victim to a Ragnarok ransomware attack? At least that is what information I received from a security researcher suggests.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Windows 10: New SSU KB5001205 fixes Secure Boot issues
[English]Microsoft has released a new Servicing Stack Update (SSU) for Windows 10. The SSU KB5001205 is supposed to fix a vulnerability in the fixt Security Boot. This vulnerability was torn open by a previous update for the Security Boot.
Microsoft Defender automatically mitigates CVE-2021-26855 on Exchange Server
[German]Microsoft is taking the next step in securing on-premises Exchange installations. Microsoft Defender not only detects infections of a system as a result of the ProxyLogon vulnerabilities. The virus scanner can also automatically detect a vulnerable system and closes the … Continue reading
Exchange ProxyLogon News: Patch status, new PoC and new findings (03/18/2021)
[German]Regarding the Exchange ProxyLogon vulnerabilities and the mass hack of Exchange Server systems, there is a publicly available proof of concept (PoC), so new attacks are to be expected. Patching and securing is progressing slowly. Microsoft's testing scripts should be … Continue reading
Security update for Exchange Server 2013 SP1; CUs for Exchange 2019 and 2016 (03/16/2021)
[German]Microsoft released a security advisory to revise its outdated updates for older CUs for on-premises Microsoft Exchange Servers (which have already fallen out of support). Specifically, Microsoft has released a security update for the out-of-support Microsoft Exchange Server 2013 Service … Continue reading
Microsoft Exchange (On-Premises) one-click Mitigation Tool (EOMT) released
[German]Microsoft has released its onclick Microsoft Exchange (On-Premises) Mitigation Tool (EOMT) as of March 15, 2021. The tool is intended to provide a one-click solution to mitigate the CVE-2021-26855 chess vulnerability on on-premises Exchange Server installations and is primarily intended … Continue reading