{"id":13350,"date":"2020-02-26T00:35:44","date_gmt":"2020-02-25T23:35:44","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=13350"},"modified":"2020-10-23T20:39:20","modified_gmt":"2020-10-23T18:39:20","slug":"security-information-feb-25-2020","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/02\/26\/security-information-feb-25-2020\/","title":{"rendered":"Security information (Feb. 25, 2020)"},"content":{"rendered":"

[German<\/a>]In this blog post, I will quickly summarize important security information that has come to my attention in the last few hours. There are so many topics that the blog would burst with individual contributions. Are violent things like missing security features in certain Microsoft Office 365 variants about RCE vulnerabilities that endanger power plants, etc. are once again all there. <\/p>\n

<\/p>\n

Microsoft Office 365  fails in protection against Emotet<\/h2>\n

\"\"The ransomware Trojan Emotet is often initially spread via spam mail attachments. Administrators should actually secure their Microsoft Office 365 environments against Emotet attacks. The business versions of Office 365 lack an important protective function that can prevent Emotet infections, among other things. This is documented by Microsoft, but largely unknown. <\/p>\n

Background: Admins can use group policies to block some things like macro execution in Office. But: When you switch to Office 365, most versions of Office 365 ignore the defaults from Group Policy (without reporting this). German magazine heise has documented it in this article<\/a>.  <\/p>\n

RCE bug threaten power plants<\/h2>\n

Critical remote code vulnerabilities (RCE) in Siemens SPPA-T3000 control system threaten global power plants. A chain of 17 bugs could be exploited to stop power generation and cause malfunctions in power plants..<\/p>\n

\n

Critical Remote Code-Execution Bugs Threaten Global Power Plants Seventeen bugs could be exploited to stop electrical generation and cause malfunctions at power plants. https:\/\/t.co\/HZ7ekdz4pN<\/a>#News<\/a><\/p>\n

\u2014 Mark Cutting (@phenomlab) February 25, 2020<\/a><\/p><\/blockquote>\n