 |
 |
When Security Hardening Becomes a Security Risk: The CLFS Case and the SignDrop Windows Zero-Day Or: How audit-driven security hardening can sometimes achieve the exact opposite of what it was intended to do. Sometimes, IT security has a rather ironic way of working. You try to make your infrastructure more secure by implementing additional hardening […]
Security Advisory – CVE-2026-98432 Severity: Critical – CVSS 3.1: 9.8 You can check if your Linux server or appliance is running any MPTCP listeners: sudo ss -Mlnp Screenshot shows that the server has no active MPTCP listener: Check if MPTCP service is enabled: sysctl net.mptcp.enabled Screenshot shows that the mptcp service is disabled (0) 1 […]
Tasks/What you try to do: You try to integrate or update the new Trellix ENS 10.7.20 from last week into ePO to try the new ransomware options and also test if we can finally exclude On-Access rules by MD5 added to filenames. The update of the bundle via Software Manager fails. The DLL replacement […]
CRL Check for Windows Environments CRL check is a tool designed to collect executables from most used paths on your client. It checks whether they are digitally signed with a code certificate and then retrieves the Certificate Revocation Lists (CRL) and OCSP for each signed file it finds. It then automatic verifies if the client […]
Migration von Trellix Endpoint ENS 10.7.19 fehlerhaft ENS Oberfläche zeigt Fehler: Error commincating with the Event Log (Windows Defender ist aktiv) mfeesp.exe verursacht Abstürze In der ENS-GUI erscheint: “Error communicating with the Event Log” Application Event 1000 mit Verweis auf MSVCP140.DLL, MSVCP140_1.DLL, MSVCP140_2.DLL, MSVCP140_atomic_wait.dll oder MSVCP140_codecvt_ids.DLL Betroffen: Microsoft Windows 11 24H2 sowie Windows Server 2016 […]
Unable to migrate to Trellix Trellix Endpoint Security ENS 10.7.19 and ENS GUI crash with event 1000 (Update/migration/upgrade) mfeesp.exe crashing GUI: Error communicating with the Event Log Application Event 1000 from MSVCP140.DLL, MSVCP140_1.DLL,MSVCP140_2.DLL, MSVCP140_atomic_wait.dll or MSVCP140_codecvt_ids.DLL Affected OS we have seen with error: Microsoft Windows W11 24H2 Microsoft Server 2016 Microsoft Server 2019 Terminal Server […]
PowerShell script to check if you SMB setup is 25H2 ready Windows 11 25H2 – Small Update, Big Impact for SMB Environments Windows 11 25H2 is now being offered on home and business systems as an Enablement Pack. This means it’s not a full new installation — instead, it’s a small ~50 MB update […]
Trellix ePolicy Orchestrator 5.10.0 Service Pack 1 Update 4 We have installed the latest Update 4 on several customer on-premises EPO installation and the update works fine and without any problems. Key Considerations for Updating Trellix ePO 5.10 SP1 to the Latest Rollup 4 Check your ePO database size. Some Trellix SP or Rollup […]
Crl Check a Freeware tool to analyse start-up delay of an application because of Certificate Revocation lookup When you sign an executable in Windows with a code-signing certificate, there are certain registry settings that control how Windows behaves. As soon as an EXE or DLL is signed, a complex mechanism comes into play that checks […]
Full Guide to SignTool — With a Better, Fully Automatic Alternative if you just want to verify signatures If you’re searching for SignTool, chances are you want to verify, sign, timestamp, or inspect digital signatures on executable files. Output from: signtool.exe verify /pa /all /d signtool.exe Before we dive into all the common signtool.exe commands […]
Abstellung 3G, Schweiz Swisscom 3G, 4G, VoLTE (Voice over LTE) was muss ich beachten? In der Schweiz werden aktuelle Mobilfunkdienste zunehmend auf moderne Netztechnologien umgestellt. Besonders wichtig ist dabei, dass Smartphones VoLTE unterstuetzen. Ohne diese Funktion koennen Telefonie und SMS bei Swisscom nicht mehr wie gewohnt genutzt werden. Bakom schreibt: Ältere Mobiltelefone ohne 4G Technologie […]
Fortinet FortiClient 7.4.4.1887 IPSEC VPN not working Error: ChildSa_Negotiation_Failed We just changed from Fortinet FortiGate SSLVPN to IPSEC because FortiGate will drop SLL VPN tunnel mode for security reasons. https://docs.fortinet.com/document/fortigate/latest/administration-guide/155142/ssl-vpn-tunnel-mode-to-ipsec-vpn-migration-new My VPN jump host running under VMware workstation could not connect to the IPSEC. Before you change the NIC mode or play around one hundred […]
verify code sign certificates with our freeware tool to automatic If you’re searching for an easy way to check an EXE signature online or verify a code signing certificate on an executable, you’ve come to the right place. Over the last 20 years, we’ve seen how Certificate Revocation (CRL) issues on Windows systems—especially in enterprises—can […]
SMB over QUIC UDP is coming to on-premises Server 2025 for all OS editions. This feature will be included in every edition of Microsoft Server 2025. It uses The Microsoft Windows Admin Center Server (WAC) which was built to manage you inhouse server structure remote (no Azure or cloud dependency). The Microsoft Server and Storage […]
Dieser Artikel zielt darauf ab, den Prozess zu erläutern, den die Crypto API durchläuft, um erfolgreich eine HTTP-basierte URL für den CRL-Verteilungspunkt herunterzuladen. Er dient auch der Fehlerbehebung in Situationen, die mit der Netzwerkrückgewinnung von CRLs verbunden sind. Zusätzlich wird unser kostenloses Tool, crlcheck.exe, erwähnt, das dazu beitragen soll, komplexe Probleme effektiver zu lösen. In […]
