Tag Archives: Security

Microsoft hacked by Russian Midnight Blizzard; emails exfiltrated since Nov. 2023

[German]Microsoft has been successfully hacked by the Russian state hacker group Midnight Blizzard, also known as Nobelium. This was noticed on January 12, 2024, but the hackers were probably in the systems for months and were able to view and … Continue reading

Posted in Cloud, Security | Tagged , , , , | Leave a comment

NetScaler ADC and NetScaler Gateway vulnerabilities CVE-2023-6548 and CVE-2023-6549

[German]Administrators of a Citrix NetScaler ADC or a Citrix NetScaler Gateway should take action. Manufacturer Citrix has published a security advisory regarding the two vulnerabilities CVE-2023-6548 and CVE-2023-6549 in the above-mentioned products on January 16, 2024. One vulnerability allows DDoS … Continue reading

Posted in Security, Software | Tagged , | Leave a comment

Microsoft's PowerShell script against installation error 0x80070643 for KB5034441 (Jan. 2024)

[German]The security update rolled out on January 9, 2024 via automatic update (e.g. KB5034441) against a BitLocker Security Feature Bypass vulnerability CVE-2024-20666 in the WinRE partition fails on many systems with the installation error 0x80070643. Somehow this is a disaster … Continue reading

Posted in issue, Security, Update, Windows | Tagged , , , | 5 Comments

Authy authentication app for the desktop end of support in August 2024

If you plan to use the Authy authentication application and would like to use it for two-factor authentication (2FA) for desktop systems, you should reconsider. The developer Twilio has announced that Authy authentication for the desktop will be discontinued in … Continue reading

More Galleries | Leave a comment

Bitdefender finds vulnerabilities in Bosch BCC100 thermostats

[German]Security provider Bitdefender has informed me that security researchers in its labs have found vulnerabilities in Bosch BCC100 thermostats. Hackers can use these vulnerabilities to take control of such smart thermostats and gain access to smart home networks. The experts … Continue reading

Posted in devices, Security | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Microsoft SharePoint Server: Patch for RCE vulnerability CVE-2024-21318, and CISA warns about CVE-2023-29357

[English]Another addendum from the January 2024 patchday for Microsoft SharePoint Server. I mentioned the SharePoint Server RCE vulnerability CVE-2024-21318 in the patchday articles. This was closed with the security updates of January 9, 2023. There is a second Elevation of … Continue reading

Posted in Security, Software | Tagged , | Leave a comment

Microsoft patches CVE-2024-21325 in Printer Metadata Troubleshooter Tool (KB5034510)

[German]In December 2023, Microsoft released the Printer Metadata Troubleshooter Tool (KB5034510) to fix the HP Smart App issue. Shortly afterwards, following a tip from Stefan Kanthak, I reported on security problems with this tool here in the blog. Microsoft has … Continue reading

Posted in issue, Security, Windows | Tagged , , , , | 1 Comment

Edge 120.0.2210.133

[German]Microsoft has released another security update for the Edge (Chromium) browser with version 120.0.2210.133 on January 11, 2024. It is a security update that is intended to close vulnerabilities.

Posted in browser, Security, Update | Tagged , , | Leave a comment

Windows WinRE update (for Bitlocker Bypassing vulnerability CVE-2024-20666) fails with installation error 0x80070643 (Jan. 2024, KB5034441)

[German]Microsoft has released security updates for Windows 10 and Windows 11 (and Windows Server 2016, 2019, 2022) on January 9, 2024. This update also includes a fix (according to KB5034441) to eliminate the BitLocker Security Feature Bypass vulnerability CVE-2024-20666 in … Continue reading

Posted in issue, Update, Windows | Tagged , , , , | 6 Comments

Windows 7/Server 2008 R2; Server 2012 R2: Updates (January 9, 2024)

[German]Various security updates for Windows Server 2008 R2 (in the 4th ESU year) and for Windows Server 2012/R2 (1st ESU year) were released on January 9, 2024 (the updates can also be installed under Windows 7 SP1). Here is an … Continue reading

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment