Tag Archives: Security

38C3: Bitlocker bypassed via vulnerabilities (Dec. 2024)

[German]A small addendum from the weekend – at the 38C3 congress of the Chaos Computer Club, Thomas Lambertz, a security expert, showed how Microsoft's Bitlocker encryption can be circumvented by "downgrading" a patched vulnerability. The way in which secret services … Continue reading

Posted in devices, Security, Software, Update, Windows | Tagged , , , | Leave a comment

Vulnerabilities in G DATA Business software; fix with version 15.8.333

[German]Blog reader Fabian D. accidentally discovered a Privilege Escalation vulnerability in the G Data Security Client at the beginning of April 2024 and was then able to prove a Privilege Escalation vulnerability in the G Data Management Server during targeted … Continue reading

Posted in ios, Security, Software, Update, Windows | Tagged , , , | Leave a comment

CISA warnings: Vulnerabilities in Windows Kernel, Cleo etc

[German]The US cyber security authority CISA has added further entries to its vulnerability catalog. It warns of the Adobe ColdFusion vulnerability CVE-2024-20767, the Windows kernel vulnerability CVE-2024-35250 and vulnerabilities in the Cleo software. The vulnerabilities are known to be exploited.

Posted in Security, Software | Tagged , | Leave a comment

BlackBerry sells XDR solution Cylance to Artic Wolf

[German]A short message for readers who may rely on BlackBerry's XDR solution Cylance. News has reached me a couple of days ago, that BlackBerry is selling this asset to market leader Artic Wolf – a mutual agreement to transfer has … Continue reading

Posted in General, Security | Tagged | Leave a comment

VW data leak: terabytes of location data from electric vehicles on AWS

[German]The VW Group is at the center of a data scandal in which recorded location data from 800,000 electric vehicles amounting to terabytes was accessible from the cloud. On the one hand, the incident shows what data vehicle manufacturers collect. … Continue reading

Posted in Cloud, Security | Tagged , , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


PayPal fraud via "guest account"; German consumer advice center warns

[German]The German consumer advice center of North Rhine-Westphalia warns of a nasty scam in which criminals abuse PayPal's ability to pay via a guest account. Anyone with a bank account can fall victim to this scam – regardless of whether … Continue reading

Posted in ios, Security, Update, Windows | Tagged , , | Leave a comment

ASUS: "Christmas surprise" with christmas.exe gone wrong

[German]ASUS tried to surprise its users and sent them a special Christmas greeting with the file name christmas.exe. Of course, it has been known for years that .exe Christmas greetings should not be sent for security reasons. ASUS managed to … Continue reading

Posted in issue, Software, Windows | Tagged , , , , | 1 Comment

Discord Database probably leaked – accounts blocked (Dec. 2024)

[German]Last Friday (20. Dec. 2024) some Discord users are founding out that their Discord accounts have been locked. The received a mail about that and a password reset helps to regain access to the service. If my information is correct, … Continue reading

Posted in Security | Tagged | Leave a comment

Critical LDAP vulnerability in Windows (CVE-2024-49112)

[German]A short addendum from the December 2024 patchday. On December 10, 2024, Microsoft published a critical vulnerability (CVE-2024-49112) in the Lightweight Directory Access Protocol (LDAP). This enables remote attacks on Windows clients and servers, but has been patched. However, there … Continue reading

Posted in ios, Security, Update, Windows | Tagged , , , | 4 Comments

Automotive supplier LKQ victim of a cyber attack

[German]Brief information for readers who may have a business relationship with the supplier of vehicle parts, LKQ. The US supplier also has European subsidiaries. I have just received information that LKQ has been the victim of a cyber attack in … Continue reading

Posted in Security | Tagged | Leave a comment