Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Exploit for not full patched Windows 0-day vulnerability CVE-2020-0986
[German]Security researchers have proven that a vulnerability patched in Windows in July 2020 is still exploitable. The patch does not close a vulnerability sufficiently, so there is another way to exploit it.
Microsoft's hints for victims of cyberattacks (including Sunburst)
[German]Microsoft published two blog posts from its Detection and Response Team (DART). The posts include advice for incident responders on recovering from systemic identity compromises (after Solarigate) and what to do if infected with the Sunburst Trojan.
VPN services seized by law enforcement officials
[German]Law enforcement officials have seized and shut down, in an international collaboration, VPN services that provided safe havens for cybercriminals. The VPN services were used to conduct ransomware attacks, web skimming operations, spearphishing and account takeovers.
Worldwide UDP:443 (EDT) DDOS on Citrix (NetScaler) Gateway
[German]Brief information and a question to the Citrix NetScaler administrators. Are you noticing increased UDP:443 (EDT) access to Citrix Netscaler gateway? Currently there is information that a massive DDoS campaign against Citrix NetScaler gateways has been running since December 19, … Continue reading
Digital doorbells for consumer and its security
[German]In the consumer sector, intelligent doorbell cameras have been davertised and have also been bought heavily. Now someone has taken a closer look at some of these "doorbells" from security aspects … and found the expected results.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Microsoft says: Don't delete expired root certificates in Windows
[German]I'm bringing up again a hanging topic 'expiring certificates'. At the end of the year, some root certificates expire. However, these may not be deleted under Windows under any circumstances, since otherwise it comes to problems.
New Emotet Campaign during the Holidays 2020
[German]Brief security information to the readership. After being somewhat quiet over the past few weeks, a new malware/ransomware campaign from the Emotet group seems to be ramping up for the holidays.
2nd backdoor found on infected SolarWinds systems
[German]Security researchers and forensic experts have found two other malware variants, Supernova and CosmicGale, in systems infected with the SunBurst Trojan via SolarWinds Orion software. Security researchers suspect that there is a second hacking group at work.
SUNBURST hack: Microsoft's analysis and news
[German]The hack of many US agencies and companies via the SUNBURST backdoor, executed by hackers suspected to be close to the state, is drawing wider circles. It was probably uncovered by accident, US President Trump is pointing the finger at … Continue reading
BlackBerry analysis on MountLocker Ransomware as a Service
[German]Security researchers from BlackBerry have recently published a study dedicated to the MountLocker ransomware. This is now provided to other cyber criminals 'as a service' in exchange for revenue sharing.