Security Blog

eMudhra-Vorfall: Acht CA-Schlüssel waren trivial erratbar – was TLS-Zertifikatsinhaber jetzt prüfen müssen

eMudhra-Vorfall: Acht CA-Schlüssel waren trivial erratbar – was TLS-Zertifikatsinhaber jetzt prüfen müssen

6. November 2026 | Zertifikate | IT-Sicherheit Im Oktober 2026 wurde bekannt, dass die indische Zertifizierungsstelle eMudhra acht Zwischenzertifikate (Intermediate CAs) mit praktisch wertlosen privat...

6 Nov 2026

PHP2Shell: critical PHP vulnerabilities – how to patch now

PHP2Shell: critical PHP vulnerabilities – how to patch now

21 October 2026 | PHP | IT security On 21 October 2026 the PHP security team released updates for all PHP versions still supported . They close two critical vulnerabilities that have become known as P...

21 Oct 2026

Odoo 19 security architecture: combining firewall, 2FA, permissions and Web RBL properly

Odoo 19 security architecture: combining firewall, 2FA, permissions and Web RBL properly

On our five websites Odoo is reachable from the open internet, and that is not an exception but the normal case: anyone who runs an offer, a shop or a customer login has a public server. A single vuln...

27 Sept 2026

Windows 11 KB5124008: Domain Trust Relationship May Break After the Update

Nanti Phooprasert | Biricon IT Services GmbH

Windows 11 KB5124008: Domain Trust Relationship May Break After the Update

14 September 2026 | Microsoft Windows | Active Directory | IT Security Reports of an unusual problem in traditional Active Directory environments are mounting following the release of the September 20...

14 Sept 2026

Security warning: How authorities, bosses and partners can secretly read your messaging app conversations

Alexander Biringer | Biricon IT Services GmbH

Security warning: How authorities, bosses and partners can secretly read your messaging app conversations

The tactic: spying through the back door The principle is alarmingly simple and exploits a feature that messaging services originally introduced for users’ convenience: linking additional devices (thr...

5 Sept 2026

Rootkit via IMAP and SMTP over SSL

Alexander Biringer | Biricon IT Services GmbH

Rootkit via IMAP and SMTP over SSL

We have long anticipated this and advised customers to rigorously block unknown IMAP, POP and SMTP traffic as well. Now a rootkit that exploits precisely this security gap has been published on Github...

5 Sept 2026

Sophos SG is dead

Alexander Biringer | Biricon IT Services GmbH

Sophos SG is dead

Despite years of proven performance and excellent reviews, Sophos has dealt the death blow to the SG series, formerly Astaro ASG. On 6 February 2023, it announced the end-of-life date for all licences...

8 Feb 2023

Suspected fraud in wave of google fonts legal warning letters in Austria

Alexander Biringer | Biricon IT Services GmbH

Suspected fraud in wave of google fonts legal warning letters in Austria

Following enquiries from several customers, we have taken a closer look at the case and will discuss the technical aspects of the letter. However, this does not constitute legal advice. The second par...

22 Jan 2023

EU General Data Protection Regulation (GDPR)

Alexander Biringer | Biricon IT Services GmbH

EU General Data Protection Regulation (GDPR)

The consequences of a data breach can be devastating. Under the EU General Data Protection Regulation, you could also face fines of up to €20 million or 4% of your global annual turnover – whichever i...

4 Jun 2018

SamSam ransomware

Alexander Biringer | Biricon IT Services GmbH

SamSam ransomware

Although most of the damage caused by ransomware comes from indiscriminate, untargeted attacks using software such as Locky and GlobaImposter, devastating, sniper-like targeted attacks are on the rise...

16 May 2018

Intel Core CPU security flaw affects models dating back up to 10 years, including current models.

Alexander Biringer | Biricon IT Services GmbH

Intel Core CPU security flaw affects models dating back up to 10 years, including current models.

Not a day goes by without a new security warning. Today's problem concerns the Management Platform. The following technologies are affected: Intel® Active Management Technology Intel® Small Business T...

Intel security vulnerability

11 May 2017

MouseJack - Hijacking Your Mouse and Keyboard

Alexander Biringer | Biricon IT Services GmbH

MouseJack - Hijacking Your Mouse and Keyboard

Even wireless mice and keyboards can be hacked using hardware costing around €15. Firmware updates are available for some manufacturers’ devices; for others, you should consider whether to keep using them or replace them with secure hardware.

3 May 2017

1
2