2026-01-13 We would like to inform you that the Sophos SG Firewall, which is still in use in some environments, will reach its official end-of-life (EOL) status on June 30, 2026. Customers who continu…
IT Security
End-of-Life (EOL) Sophos SG Firewall on June 30, 2026
IT Security
Microsoft Releases Security Updates for Microsoft WSUS
2025-10-24 On Friday morning, Microsoft released a security update for a critical vulnerability in WSUS. The vulnerability, identified as CVE-2025-59287 , is classified as a remote code execution…
IT Security
Security Vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) Firewall
2025-09-26 Cisco has discovered two critical vulnerabilities within their ASA software. Patches are available from the manufacturer for the two vulnerabilities with CVE-2025-20333 and CVE-20…
IT Security
Critical vulnerability in VMware ESXi
2025-07-16 VMware has patched four vulnerabilities, some of which are critical, in ESXi, Workstation and VMware Tools. Three bugs (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238) allow attackers with …
IT Security
Veeam Backup & Replication: Schwachstelle ermöglicht Codeausführung
2025-03-20 On March 19, 2025, VEEAM published a critical vulnerability in their data backup solution VEEAM Backup & Replication. All VEEAM Backup & Replication versions < 12.3.1 are affecte…
IT Security
Meinberg Addresses Multiple Vulnerabilities in LANTIME Firmware – MBGSA-2025.02
2025-03-10 The manufacturer Meinberg has released firmware version 7.08.021 for the NTP time servers of the LANTIME M and LANTIME IMS series to address vulnerabilities in multiple libraries. The new v…
IT Security
Critical Vulnerabilities in Microsoft Security Updates in January 2025
17 January 2025 On 14 January 2025, Microsoft published several vulnerabilities in the context of the rollout of monthly security updates. Microsoft provides further information with the following lin…
IT Security
Paessler closes Vulnerability in PRTG – CVE-2024-12833
2025-01-13 On 9 January 2025, the company Paessler published a risky vulnerability in its monitoring solution PRTG. This vulnerability affects all Paessler PRTG < 25.1.102.1373. Security gaps were …
IT Security
Critical Vulnerabilities in Sophos XGS Firewalls fixed – 12/2024
2024-12-20 On 2024/12/19 Sophos has released following vulnerabilities XGS Firewall: CVE-2024-12727 CVSS: 9.8CVE-2024-12728 CVSS: 9.8CVE-2024-12729 CVSS: 8.8 Sophos provides further information under …
IT Security
High severity vulnerabilities in Veeam Backup & Replication 12/2024
05 December 2024 On 04 December 2024, Veeam published several, in parts high severity vulnerabilities related to their Veeam Backup & Replication data backup solution. All Veeam Backup & Repl…
IT Security
Cisco: Several Vulnerabilities in ASA, Firepower and FTD Software 10/2024
2024-11-04 On 28 October 2024, Cisco published a large number of vulnerabilities for the Cisco Adaptive Security Appliance (ASA), Cisco Firepower and Cisco Firepower Threat Defense (FTD) software: Acc…
IT Security
Critical Vulnerabilities in Veeam Backup & Replication
06 September 2024 On 04 September 2024, Veeam published several, in parts critical vulnerabilities related to their Veeam Backup & Replication data backup solution. All Veeam Backup & Replica…
IT Security
VIVAVIS – HIGH-LEIT RCE Vulnerability CVE-2024-38456
2024-09-02 In the course of a penetration test, Schutzwerk GmbH have discovered an RCE vulnerability in the HIGH-LEIT SCADA system from VIVAVIS. This vulnerability enables logged-on, non-privile…
IT Security
RDL vulnerability in Microsoft Server closed – CVE-2024-38077
On 9th August 2024, a vulnerability was published in the ‘Remote Desktop Licensing’ role service that allows unauthenticated attackers to remotely execute arbitrary code in the context of the service …
IT Security
Warning about Microsoft security updates May 2024
May 17, 2024 On May 14, 2024, Microsoft rolled out the security update KB5037765 for Windows Server 2019 and Windows 10 as part of the monthly patchday. The security updates from the May Patchday fail…
IT Security
Cisco – Several vulnerabilities in ASA und Firepower FTD Software
2024-04-25 Cisco published the following three vulnerabilities for the Cisco Adaptive Security Appliance (ASA) software and the Cisco Firepower Threat Defense (FTD) software on 24.04.2024: ̵…
IT Security
Backdoor in upstream xz/liblzma in various LINUX/SOLARIS distributions – CVE-2024-3094
2024-02-04 In the upstream of the pack program “xz”, concerning the library “liblzma” in versions 5.6.x, a high-risk vulnerability has been actively introduced, which is used i…
IT Security
Paessler closes XSS vulnerability in PRTG – CVE-2023-51630 – Correction
2024-01-16 Paessler has closed the high-risk vulnerability CVE-2023-51630 in the network monitoring solution PRTG. The XSS vulnerability allows a remote attacker to bypass authentication and take over…
IT Security
Paessler closes XSS vulnerability in PRTG – CVE-2023-51630
2024-01-16 Paessler has closed the high-risk vulnerability CVE-2023-51630 in the network monitoring solution PRTG. The XSS vulnerability allows a remote attacker to bypass authentication and take over…
IT Security
Critical vulnerability fixed in Trend Micro Worry-Free Business Security
2023-09-21 Trend Micro has fixed the critical vulnerability CVE-2023-41179 in their Worry-Free Business Security solution and provides patch 2495 for version 10.0 SP1. Trend Micro publishes further de…
