I am in urgend need to talk with my Editor. At the slightest mistake she snarls at me from the side. It’s not possible to work under these conditions ;-)

Yesterday and today I’ve noticed the author malvuln1. He has uncovered vulnerabilities for 14 malware and backdoor applications. Yes, you are correct: He has found vulnerabilities in malware and backdoors, practically with proof-of-concepts to reproduce. No need to emphasise, that’s all Windows malware we’re talking about. There is no indication whether he contacted the respective vendors of the affected “software” prior to his full disclosure. Also missing are CVE2 reference numbers and CVSS3 Scores. But with a chuckle we just look away. Read more

I need to admit: I really love writing audits. It has a certain degree of scientific working to falsify statements. So I was recently confronted with the following quote from a responsible IT manager: We are not concerned with security, but with liability. If Microsoft promises security, this is enough for us. Well, unfortunately I did not attend a judicial exam but when I read the Microsoft EULA1 regarding risks and liability, I consider the circumstances slightly more differentiated: Read more

Lately I received the following invitation for an online meeting in a network of consultants: The EU-US Privacy Shield has been overturned by the ECJ. What does this mean for companies and service providers? Which services may still be used and which data may be transferred? Exactly my topic and I continued further reading. The link at the end of the mail led to a meeting room on the platform discord.com - exactly my sense of humour! Read more