computer systems Archives

Winsage

December 20, 2025

Windows RemoteApp problems, ferry malware arrest, Senator’s open-source warning

Microsoft's December 2025 security update disrupts Message Queuing (MSMQ) on older Windows 10 and Server systems. A subsequent November 2025 update causes RemoteApp connection failures on Windows 11 24H2/25H2 and Windows Server 2025 devices, particularly in Azure Virtual Desktop environments, although Windows Home or Pro editions remain unaffected. French authorities arrested two crew members of an Italian ferry for allegedly installing malware that could allow remote control of the vessel; one suspect has been released while the other is in custody. Tom Cotton, Chairman of the Senate Intelligence Committee, has urged action on vulnerabilities in open-source software, citing concerns about foreign adversaries inserting malicious code. A zero-day exploit, CVE-2025-20393, affecting Cisco email security products has been exploited by Chinese hackers since late November. DXS International reported a cybersecurity incident involving unauthorized access to its internal servers, with an investigation ongoing. A report from Resecurity indicates a rise in the criminal use of DIG AI for generating tips for illegal activities. CISA warned of a critical vulnerability in ASUS Live Update software, which has been actively exploited. An automated campaign targeting multiple VPN platforms has been reported, with credential-based attacks observed on Palo Alto Networks GlobalProtect and Cisco SSL VPN.

Tech Optimizer

December 7, 2025

K7 Antivirus Flaw Lets Attackers Gain SYSTEM-Level Privileges

A security vulnerability, designated as CVE-2024-36424, has been found in K7 Ultimate Security antivirus software, allowing low-privileged users to escalate their permissions to the SYSTEM level, thus gaining full control over affected Windows devices. The flaw arises from inadequate access controls in the named pipe K7TSMngrService1, which allows limited permission programs to communicate with higher-privileged programs. Attackers can exploit this vulnerability to disable antivirus protection or execute malicious code with SYSTEM privileges. K7 Computing has released several patches to address the issue, but researchers have found ways to bypass these protections. The vulnerability affects K7 Ultimate Security version 17.0.2045 and potentially earlier versions, prompting organizations to upgrade to the latest patched version.

AppWizard

November 11, 2025

German healthcare aims to replace faxes and phones with secure mess…

Germany's healthcare system is introducing TI-Messenger, an encrypted messaging service overseen by Germany’s National Digital Health Agency, Gematik, to enhance communication among patients, healthcare professionals, and insurance companies. This service aims to replace traditional communication methods like faxes and phone calls, with initial trials showing significant time savings for medical staff. TI-Messenger, based on the Matrix open network technology standard, is designed to allow secure communication across health institutions while maintaining data control. As of July 15, 2025, it became accessible to all German citizens with public health insurance. A trial in Hamburg demonstrated that pharmacists significantly reduced phone calls by using TI-Messenger. There are two versions of the service: TI Messenger ePA for citizens and TI-Messenger Pro for healthcare professionals, which has not yet seen widespread adoption. Challenges in user adoption exist, with potential solutions including financial incentives and simplified onboarding processes. Future developments may lead to automated responses and improved communication practices, with hopes for collaboration with other European countries using similar technologies.