Tag Archives: Security

Microsoft Security Update Summary (December 10, 2024)

[German]On December 10, 2024, Microsoft released security updates for Windows clients and servers, for Office – as well as for other products. The security updates address 70 vulnerabilities (CVEs), including 16 critical vulnerabilities, one of which is classified as 0-day … Continue reading

Posted in ios, Office, Security, Software, Update, Windows | Tagged , , , , | Leave a comment

Advertising

Blue Yonder: Termite ransomware group claims hack from Nov. 2024

[German]Last week, I received information that Blue Yonder had fallen victim to a ransomware attack. As the company probably also offers its services in Germany, I am taking up the case here in the blog. Customers of the company should … Continue reading

Posted in Security | Tagged | Leave a comment

Massive wave of attacks on Citrix Netscaler gateways since 5, and 6, Dec. 2024?

[German]A quick question or information for the readers of the blog who use Citrix Netscaler Gateways. Were you able to observe a massive increase in attack attempts on these instances yesterday evening? A blog reader has just informed me about … Continue reading

Posted in devices, Security | Tagged , | Leave a comment

Windows: 0patch for 0-day URL File NTLM Hash Disclosure Vulnerability

[German]ACROS Security has discovered a vulnerability in Windows that has not yet been closed by an update and allows the disclosure of NTLM hash values via URL. ACROS Security has released an opatch micropatch to fix this vulnerability. Until Microsoft … Continue reading

Posted in ios, Security, Windows | Tagged , | Leave a comment

30 Million protected links exposed by 'safe' link-sharing provider

Cybernews research found out, that a safe linking service accidentally leaked millions of links that were meant to be private and exposed who created them. Researchers discovered that Safelinking.net, a platform designed to protect and manage links, had publicly leaked … Continue reading

Posted in Security | Tagged | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Retailer Medion victim of a cyber attack

[German]It seems that Medion, a German Lenovo subsidary, who offers electronic devices – for discounter like Aldi -has becom victim of a cyber attack. There are customers complaining about "delivery problems" with orders. And I have found information from Medion, … Continue reading

Posted in Security | Tagged | Leave a comment

Advertising

STIGA data leak (garden and sport tools)

[German]The company STIGA, active as a supplier in the field of robotic lawnmowers, gardening equipment and sporting goods, has suffered a data protection incident. A reader had made enquiries and received confirmation from the provider. Customer data has been leaked … Continue reading

Posted in Security | Tagged | Leave a comment

Bootkitty: First Linux UEFI Bootkit

[German]ESET Research has discovered the first Linux UEFI boot kit and named it Bootkitty. This Linux UEFI boot kit was uploaded to Virustotal in early November 2024 and came to the attention of the security researchers. Advertising

Posted in Linux, Security | Tagged , | Leave a comment

Advertising

Windows Server 2012: Unofficial 0patch fix for MoW 0-day vulnerability

[German]ACROS Security has developed a fix for a previously unknown 0-day vulnerability in the Mark of the Web security feature of Windows Server 2012 and Server 2012 R2. The fix is available to customers via a 0patch micro-patch and enables … Continue reading

Posted in ios, Security, Windows | Tagged , | Leave a comment

Email bombing: A new spam campaign? Or a cover-up for a (black basta) attack?

[German]A German blog reader recently shared an observation from his IT department with me. An employee was bombed by a veritable wave of spam  mail (more than 1,000/hour). All the emails had some kind of confirmation for a registration, which … Continue reading

Posted in Security | Tagged , | Leave a comment