Tag Archives: Security

Patchday: Windows 10/Server Updates (July 9, 2024)

Posted on 2024-07-10 by guenni

[German]On July 9, 2024 (second Tuesday of the month, patch day at Microsoft), various cumulative updates were released for the supported Windows 10 builds (from the RTM version to the current version) as well as for the Windows Server counterparts. … Continue reading →

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment

Microsoft Security Update Summary (July 9, 2024)

Posted on 2024-07-09 by guenni

[German]On July 9, 2024, Microsoft released security updates for Windows clients and servers, for Office – as well as for other products. The security updates eliminate 138 vulnerabilities (CVEs), including five critical vulnerabilities (two are already being exploited). Below is … Continue reading →

Posted in Office, Security, Update, Windows | Tagged , , , , | Leave a comment

Midnight Blizzard hack: Microsoft sends notification to customers by email that ends up in SPAM folders

Posted on 2024-07-09 by guenni

[German]After Microsoft's e-mail system (Exchange Online, Outlook.com) was compromised by Russian hackers from the state sponsored group Midnight Blizzard Hackers, Microsoft recently had to admit that e-mails to customers were also affected. In an attempt to inform customers, Microsoft made … Continue reading →

Posted in Cloud, Security | Tagged , , , | Leave a comment

OpenAI 2023 hacked – not went public till now

Posted on 2024-07-07 by guenni

[German]The chatGPT provider OpenAI was the victim of a cyberattack in 2023, in which the attackers were able to access and read the internal chats between researchers and other employees of the company. However, the source code behind the OpenAI … Continue reading →

Posted in Cloud, General, Security | Tagged , | 1 Comment

MSI Center: Vulnerability CVE-2024-37726 allows system privileges

Posted on 2024-07-06 by guenni

[German]A quick note for Windows users who have the MSI Center from Micro-Star International installed on their system. There is a Local Privilege Escalation vulnerability CVE-2024-37726 in this software that allows an attacker to gain system privileges. Versions <= 2.0.36.0 … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

HornetSecurity quarantines Microsoft Exchange emails (July 2, 2024)

Posted on 2024-07-03 by guenni

[German]A information to the administrators among the blog readership who use HornetSecurity to filter mails (e.g. in Microsoft Exchange). A reader informed me that the mails in question (for Exchange) have been quarantined. On the HornetSecurity status page there is … Continue reading →

Posted in Cloud, Security, Software | Tagged , , | 1 Comment

Has the Qualys blog been hacked? (July 2, 2024)

Posted on 2024-07-03 by guenni

[German]Brief information about Qualys, a technology company offering cloud security and compliance services. The question arises as to whether their blog may have been hacked. Because there is currently an entry in Cyrillic advertising "Banknotes in the online casino". I … Continue reading →

Posted in Security | Tagged | 3 Comments

regreSSHion: Critical OpenSSH server vulnerability CVE-2024-6387

Posted on 2024-07-02 by guenni

[German]A critical vulnerability CVE-2024-6387 has been disclosed in OpenSSH servers. The vulnerability, known as regreSSHion, allows remote unauthenticated code execution – and security firms have found over 14 million potentially vulnerable OpenSSH servers on the internet. However, the risk should … Continue reading →

Posted in Linux, Security, Software | Tagged , , | Leave a comment

GrimResource: Windows XSS vulnerability exploited with .msc files

Posted on 2024-07-01 by guenni

[German]There is a vulnerability in Windows that allows attackers to infect a system and search a network. Security researchers from Elastic uncovered this new infection technique in mid-June 2024 and dubbed it GrimResource. I was aware of this at the … Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Windows 10: 0patch provides 5 years of additional support

Posted on 2024-06-30 by guenni

[German]Microsoft is planning to end support for Windows 10 in October 2025. After that, there will only be updates for paying customers of the ESU program. However, ACROS Security will use its 0patch agent to ensure that vulnerabilities in Windows … Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment