Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Watch OS 7 & iOS 14 breaks Authenticator app functionality
[German]A brief information for user of an Apple smart watch or iOS 14 device, using Microsoft's Authenticator app. After updating to Watch OS 7 or iOS 14, communication with the two-factor authentication app no longer works. And there are also … Continue reading
Unprotected Microsoft Bing Server leaks search queries, location data
[German]An unsecured Microsoft Bing server allowed third parties to retrieve search queries and user location data. Among the data disclosed was device information – but no personal data. In some cases, however, the combination of this data can identify users.
CISA Warning: Patch your Windows Servers against CVE-2020-1472 (Zerologon)
[German]The United States Agency for Cyber Security and Infrastructure Security (CISA) has issued an emergency order giving the U.S. government agencies a four-day deadline to implement a Windows Server patch against the Zerologon vulnerability (CVE-2020-1472).
Data leak at online provider windeln.de confirmed
[German]The German online vendor windeln.de operated an insecure server, so that the personal data of 700,000 customers could be accessed. After I reported about it here in the blog and the whole thing went further afield, the provider issued a … Continue reading
Data leak: Corona test results of almost 400,000 Slovaks public
[German]Serious data leak in Slovakia: The corona test results of almost 400,000 Slovaks were publicly available on the Internet. There is no need for hackers anymore if personal data is handled so carelessly.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Video Encoder for HiSilicon-Chips (Huawei) with critical vulnerabilities
[German]Security researcher Alexei Kojenov has discovered serious security vulnerabilities in software video encoders written for HI3520D chipsets from Huawei subsidiary HiSilicon. Because of a discovered access with a standard password, he even writes from a backdoor.
Firefox Send has been abandoned
[German]Short information for users of the service Firefox Send. Mozilla is now finally abandoning Firefox Send and stopping this service. The reason is abuse for malware spreading and spear phishing.
0patch fixes Zerologon (CVE-2020-1472) vulnerability in Windows Server 2008 R2
[German]ACROS Security has released a micropatch for the vulnerability CVE-2020-1472 (Zerologon) for Windows Server 2008 R2. This vulnerability is only closed by Microsoft starting with Windows Server 2012 R2.
Ransomware attack in German hospital ends deadly for a women – blame Shitrix vulnerability
[German]The cyber attack on the University Hospital Düsseldorf (UKD) last week turns out to be a ransomware attack, as I suspected. The clinic was probably a random victim, but now the public prosecutor's office is investigating, since a patient died … Continue reading
Windows Server: Zerologon vulnerability (CVE-2020-1472) allows domain hijacking
[German]Security researchers have uncovered a vulnerability in all versions of Windows Server that allows domain transfer with a simple approach. This vulnerability, called Zerologon (CVE-2020-1472), was closed with the security updates of August 2020. Those who have not yet installed … Continue reading