Category Archives: Security

Multiple vulnerabilities in OpenSSH (Feb. 2025)

Posted on 2025-02-20 by guenni

[German]Security experts from Qualys TRU have discovered two vulnerabilities in the OpenSSH software. In addition, an advisory on another vulnerability was published on February 11, 2024. OpenSSL 3.4, 3.3 and 3.2 are affected by this vulnerability, although upgrades to newer … Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Firefox 115 ESR: Windows 7/8.1 Support till September 2025

Posted on 2025-02-19 by guenni

[German]Mozilla Firefox 115 ESR still runs on Windows 7 / 8.1 and has been in extended support for some time. It was previously known that the developers wanted to support this browser version until March 2025. The Mozilla developers have … Continue reading →

Posted in browser, Security, Software, Update | Tagged , , | Leave a comment

Patchday: Microsoft Office Updates (February 4 and 11, 2025)

Posted on 2025-02-13 by guenni

[German]On February 11, 2025 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Updates were also released for February 4, … Continue reading →

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Patchday: Windows Server-Updates (February 11, 2025)

Posted on 2025-02-12 by guenni

[German]On February 11, 2025 (second Tuesday of the month, Patchday at Microsoft) various cumulative updates were released for the supported versions of Windows Server. Below I have extracted the provided updates including some details for these Windows Server versions (from … Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment

Patchday: Windows 10/11 Updates (February 11, 2025)

Posted on 2025-02-12 by guenni

[German]On February 11, 2025 (second Tuesday of the month, Patchday at Microsoft), Microsoft also released cumulative updates for the still supported versions of the client operating systems Windows 10 and Windows 11. Here are some details about these updates, which … Continue reading →

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment

Microsoft Security Update Summary (February 11, 2025)

Posted on 2025-02-12 by guenni

[German]On February 11, 2025, Microsoft released security updates for Windows clients and servers, for Office – and for other products. The security updates eliminate 55 vulnerabilities (CVEs), three of which are classified as critical and four as 0-day. Below is … Continue reading →

Posted in Office, Security, Software, Update, Windows | Tagged , , , , | Leave a comment

Apple releases emergency update iOS 18.3.1 (Feb. 10, 2025)

Posted on 2025-02-11 by guenni

[German]Apple has released an update to iOS 18.3.1 on 10.2.2025. It is an emergency update, so to speak, which is intended to close an exploitable vulnerability. The update also contains bug fixes. The update installation is recommended for all users … Continue reading →

Posted in devices, ios, Security, Update | Tagged , , , , | Leave a comment

Law enforcement officials seize 8Base ransomware leak site (10.2.2025)

Posted on 2025-02-11 by guenni

[German]International law enforcement organizations (FBI, Interpol), have seized the leak site of the ransomware group 8Base, with the participation of the Bavarian State Office of Criminal Investigation and on behalf of the Bamberg Public Prosecutor General's Office. In addition, four … Continue reading →

Posted in Security | Tagged | Leave a comment

Attackers use ASP. NET key to spread malware

Posted on 2025-02-10 by guenni

[German]In December 2024, the Microsoft Threat Intelligence team observed limited activity from an unknown attacker using a publicly available, static ASP. NET machine key to inject malicious code and deploy the Godzilla post-exploitation framework.

Posted in Security, Software | Tagged , | Leave a comment

Critical vulnerability CVE-2025-23114 in Veeam Updater

Posted on 2025-02-07 by guenni

[German]A critical vulnerability CVE-2025-23114 has been reported in the Veeam Updater. This vulnerability could be used to carry out man in the middle attacks. This affects various products from the provider. Veeam has published corresponding security updates to close the … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment