Tag Archives: Security

STIGA data leak (garden and sport tools)

[German]The company STIGA, active as a supplier in the field of robotic lawnmowers, gardening equipment and sporting goods, has suffered a data protection incident. A reader had made enquiries and received confirmation from the provider. Customer data has been leaked … Continue reading

Posted in Security | Tagged | Leave a comment

Advertising

Bootkitty: First Linux UEFI Bootkit

[German]ESET Research has discovered the first Linux UEFI boot kit and named it Bootkitty. This Linux UEFI boot kit was uploaded to Virustotal in early November 2024 and came to the attention of the security researchers. Advertising

Posted in Linux, Security | Tagged , | Leave a comment

Windows Server 2012: Unofficial 0patch fix for MoW 0-day vulnerability

[German]ACROS Security has developed a fix for a previously unknown 0-day vulnerability in the Mark of the Web security feature of Windows Server 2012 and Server 2012 R2. The fix is available to customers via a 0patch micro-patch and enables … Continue reading

Posted in ios, Security, Windows | Tagged , | Leave a comment

Email bombing: A new spam campaign? Or a cover-up for a (black basta) attack?

[German]A German blog reader recently shared an observation from his IT department with me. An employee was bombed by a veritable wave of spam  mail (more than 1,000/hour). All the emails had some kind of confirmation for a registration, which … Continue reading

Posted in Security | Tagged , | Leave a comment

Microsoft Exchange Server Nov. Updates Re-Release (27. Nov. 2024)

[German]Microsoft has re-released the pulled security updates for Microsoft Exchange Server 2016 and 2019 on November 27. With the first release, it turned out that the transport rules no longer worked after the update installation. Microsoft now believes it has … Continue reading

Posted in Security, Software | Tagged , , | Leave a comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Deye deactivates solar inverters in USA, UK and Pakistan

[German]This is a critical issue that I have come across recently and illustrates the risk of IT shutdowns by vendors/manufacturers or countries. The Chinese manufacturer Deye, also represented in German balcony power plants and solar system installations with inverters, has … Continue reading

Posted in Cloud, devices, Security | Tagged , | 4 Comments

Advertising

Windows: Microsoft's Bing wallpaper app as "adware"?

[German]I'm going to compile an information, that I've just come across, into a post – a second post on a similar topic will follow. Microsoft is offering a new Bing wallpaper app in the App Store that is supposed to … Continue reading

Posted in Security, Windows | Tagged , , | 1 Comment

Exchange Online Delicensing Resiliency: Protection against unintentional delicensing actions

[German]Microsoft introduced the "Exchange Online Delicensing Resiliency" feature in Exchange Online at the beginning of November 2024. This allows administrators to protect Exchange Online mailboxes from unintentional de-licensing by granting a 30-day grace period for license removal. Here is some … Continue reading

Posted in Cloud, Software | Tagged , , | Leave a comment

Advertising

Vulnerabilities in Netwrix PingCastle Pro/Enterprise (Nov. 2024)

[German]Brief information for administrators and IT service providers who use PingCastle (now part of Netwrix) to analyze Active Directory security. Due to vulnerabilities in the code, older versions of the Enterprise and Pro editions of the tool should no longer … Continue reading

Posted in Security, Software | Tagged , | Leave a comment

CISA warns about attacks on 0 day vulnerability in Palo Alto Networks firewalls

[German]An unpatched vulnerability (0-day) exist in the firewalls of Palo Alto Networks. The management interface can be accessed via this vulnerability. This 0-day vulneability is already being exploited for attacks. Both the BSI and the US authority CISA have issued … Continue reading

Posted in devices, Security | Tagged , | Leave a comment