Tomorrow I will give a short presentation for the DigiNet Südwestfalen December, st , : am on my Conferencing-Server Topic: “Security of Conferencing Software” giving Stakeholders and Decision-Makers Orientation for risk-assesment. This is a non-public event. Please register via Sonja Pfaff on the DiginetSWF Website. Read more

Black Friday is here. And with Christmas ante portas the final countdown with the toughest end-bosses in IT support begins: The own parents, partners or children with their new or old digital devices. The fundaments are laid in the upcoming days and weeks when stuff with more or less technical debts is bought. Read more

Due to a vulnerability (CVE--), attackers could join Webex meetings without being listed in the participants list. Hidden as a “ghost” from the other participants, attackers could eavesdrop on audio and video content. This is what Heise writes in his article today. But this is only possible (…) if attackers have access to meetings in the form of shared links and a password. Read more

What a pity, this is exactly the scenario I first expected for Microsoft. But I’m not really surprised that Apple is now ahead, what happened? The ocsp.apple.com server was apparently down and/or unreachable between yesterday and today. Unfortunately macOS tries to reach it every time an app is opened to check if a certificate has expired or an app has been retracted or some more magic. Read more