Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Security
Microsoft’s Control Flow Guard can be bypassed
[German]Italian security researchers have developed a concept to leverage the exploit protection control flow guard supported in Windows 8.1 up to Windows 10 (and the server counterparts). The concept will be presented to the public at Black Hat Asia.
Spotify app blocks Windows 10 system restore
[German]Owners of Windows 10 run into the problem that the spotify app from Microsoft Store kills the system recovery of Windows 10. Here ate some information and details.
Vulnerability in HPE Integrated Lights-out 2, 3, 4
[German]Another addendum for people who use HPE Integrated Lights-Out 2,3,4 (iLO2, iLO3, iLO4) and HPE Superdome Flex RMC from HP Enterprise. There is a potential vulnerability in these products.
Vulnerability in Kaspersky Secure Mail Gateway 1.1
[German]Just a short information: Kaspersky Secure Mail Gateway had several vulnerabilities, which were closed at the beginning of the month with an update.
Avoid uTorrent desktop and Web client
[German]I don't know if anyone else is using Bittorrent via the uTorrent client or their web client. For security reasons, you should not use the these clients any more.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Security-Risk: Avoid 7-Zip
[German]Many users are knowing 7-Zip as a tool for unpacking archive files. The software is free of charge and is also available in a portable version for Windows. In addition, 7-Zip is also used in various products. Funny world? Unfortunately, … Continue reading
Windows 10: Zero character bug allowed Anti-Malware bypass
[German]Windows 10 had a bug, that allowed malware to trick Windows 10's Anti-Malware Scan Interface (AMSI) by including a null character. The character simply caused the code not to be scanned. The bug was fixed on February 2018 patchday.
Microsoft Security Update Releases (February 16, 2018)
Microsoft has released on February 16, 2018, revised security information about Advisory CVE-2018-0810 and CVE-2018-0831.
Microsoft delivers updates via HTTP & more security obscurity
[German]Microsoft currently fails to deliver updates in a secure way. In a Security by obscurity style, Microsoft offers update downloads via insecure http protocol. This also applies to downloads from the Microsoft Update Catalog. And Microsoft Update Catalog strikes, if … Continue reading
Microsoft Patchday Summary (February 13, 2018)
[German]Microsoft released a series of security updates for Windows and other products on February 13, 2018. Here is a brief overview of critical and non-critical security updates, a list of all 50 CVEs and details to an updated Microsoft Security … Continue reading