Category Archives: Cloud

Exchange Online: Microsoft will now block mails from unpatched Exchange systems

[German]Microsoft has again reminded on May 8, 2023, that as a security measure for Exchange Online, they will now start to delay the delivery of mails from (on-premises) Exchange servers if these systems have fallen out of support or are … Continue reading

Posted in Cloud, Security, Software | Tagged , | Leave a comment

Advertising

Microsoft started enforcing number matching on MFA since May 8, 2023

[German]Just a reminder to administrators who are responsible for Microsoft's cloud environments (Azure, etc.) in companies. It has probably been known for a long time, but as of May 8, 2023, the provider Microsoft will switch its multi-factor authentication (MFA) … Continue reading

Posted in Cloud, Security | Tagged , | 1 Comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

Palo Alto Networks Unit 42 Cloud Threat Report Volume 7 (April 2023)

[German]The run on the cloud continues unabated, but the number of vulnerabilities and security threats is steadily increasing. Misconfigurations, weak credentials, lack of authentication, unpatched vulnerabilities and malicious (infected) open source software (OSS) threaten security. Some developers hard-pack credentials into … Continue reading

Posted in Cloud, Security | Tagged , | Leave a comment

Advertising

3 vulnerabilities discovered in MS Azure API management

[German]Security researchers from Israeli security vendor Ermetic have discovered three vulnerabilities in Microsoft's Azure API management. Two server-side request forgery (SSRF) vulnerabilities and an unrestricted file upload issue create risks for the Microsoft cloud environment. The vulnerabilities could be abused … Continue reading

Posted in Cloud, Security | Tagged , , | Leave a comment

Microsoft 365 Apps are getting a unified cloud.microsoft domain

[German]Brief information for administrators of Microsoft solutions in companies. Microsoft wants to standardize the domain names previously used to access cloud functions, such as outlook.com, live.com, microsoft365.com, office.com, onenote.com, etc., in the future and make them accessible via sub-domains under … Continue reading

Posted in Cloud | Tagged , | Leave a comment

Advertising

Parallels RAS licenses expire on April 24, 2023; reactivation required

[German]Brief note for administrators who use Parallels RAS (Remote Application Server). If the "big bang" breaks out on April 24, 2023 because the Parallels RAS refuses to work, it's probably not your fault. It looks like the vendor "screwed up" … Continue reading

Posted in Cloud, issue, Software | Tagged , | Leave a comment

Microsoft 365 has been disrupted – apps missing sporadically (April 20, 2023)

[German]There was a disruption of Microsoft 365 services (I got first reports on April 19, 2023) during the last hours. User can't reach apps in Microsoft 365 – the page ist empty. Microsoft investigated that and has now recovered, according … Continue reading

Posted in Cloud, issue | Tagged , | Leave a comment

Exchange Online: Client Access Rules (CARs) supported until Sept. 2024

[German]A short note for administrators who are responsible for Exchange Online in companies and have used Client Access Rules (CARs) so far. Actually, the support for CARs should expire – but Microsoft announced a few days ago an extension of … Continue reading

Posted in Cloud, Security | Tagged | Leave a comment

Advertising

AlienFox: Toolkit to compromise email and web hosting services in the cloud

[German]AlienFox is a toolkit for compromising email and web hosting services. This toolkit is highly modular, comes in multiple versions, and attempts to exploit misconfigurations in the cloud to grab credentials for services such as AWS, Microsoft 365, Google Workspace, … Continue reading

Posted in Cloud, Security | Tagged , | Leave a comment

Citrix Cloud Connector May 2023 upgrade requires new DigiCert G4 root and intermediate certificates

[German]Brief note for administrators who are responsible for the deployment of the Citrix Cloud Connector. Normally, there is no need to worry about an update of this connector. However, in early May 2023, there is a connector update that administrators … Continue reading

Posted in Cloud, Security, Software | Tagged , , | Leave a comment