Category Archives: Security

Windows 10: Prices for Extended Security Updates announced

Posted on 2024-04-03 by guenni

[English]Microsoft has already announced that there will be an ESU program (Extended Security Updates Program) for Windows 10, which will no longer be supported on 14 October 2025. Even private users will be able to purchase extended security updates for … Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment
Advertising

Breaking news: Microsoft abandons ChatGPT in EU after AI recommendation

Posted on 2024-04-01 by guenni

[German]Microsoft's plans to roll out its AI solution Copilot worldwide with its products do not seem to be working out very well at the end of the day. Following extreme headwinds  in US congress and in the EU, I understand … Continue reading →

Posted in Security, Software | Tagged , , , , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

US Congress bans the use of Microsoft AI solution Copilot

Posted on 2024-03-31 by guenni

[German]Microsoft is sticking to its plans to roll out Copilot to users in all kinds of products, from Windows to Office. However, the US House of Representatives has issued a strict ban on the use of Microsoft Copilot by its … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment
Advertising

Linux: Backdoor in upstream xz/liblzma; compromise of SSH servers

Posted on 2024-03-30 by guenni

[German]As of Friday, March 29, 2024, Red Hat has published a warning. The latest versions of the "xz" tools and libraries contain malicious code, a backdoor, which is apparently intended to allow unauthorized access. Affected by the backdoor (vulnerability CVE-2024-3094) … Continue reading →

Posted in issue, Linux, Security, Software | Tagged , , | 1 Comment

Microsoft Edge Bug CVE-2024-21388 allowed to install arbitrary extensions

Posted on 2024-03-30 by guenni

[German]A now-patched vulnerability in the Microsoft Edge web browser could have been abused to install arbitrary extensions on users' systems and carry out malicious actions. This was revealed by a security researcher to The Hacker News. Advertising

Posted in browser, issue, Security | Tagged , | Leave a comment
Advertising

Microsoft .NET 7 will no longer be supported on May 14, 2024

Posted on 2024-03-29 by guenni

Brief information for people who use Microsoft .NET 7. This runtime environment will cease to be supported on May 14, 2024 and will no longer receive security updates. Advertising

Posted in Security, Software | Tagged , | Leave a comment

Apple users target of "MFA bombing" attacks (2024)

Posted on 2024-03-28 by guenni

[German]Users of Apple devices (iPhone, Apple Watch, Macs) are probably being targeted by a wave of attacks known as "MFA bombing". The aim of the attackers is to take over the victims' Apple accounts through a wave of password reset … Continue reading →

Posted in devices, Security | Tagged , | Leave a comment

Google Chrome 123.0.6312.86/.87

Posted on 2024-03-27 by guenni

[German]Google has released an update of the Google Chrome browser (branch 123) in the stable channel on March 26, 2024, which closes seven vulnerabilities (some of them critical). The Extended Stable Channel and the app for Android have also received … Continue reading →

Posted in browser, Security, Software, Update | Tagged , , | Leave a comment
Advertising

Stop: Disable the scanning of documents by Adobe AI solutions!

Posted on 2024-03-23 by guenni

[German]Adobe has begun to introduce its own AI solutions in its products. There is a risk that Adobe products will begin to scan all documents in companies in order to obtain data for feeding the AI solutions. Administrators should therefore … Continue reading →

Posted in Security, Software | Tagged , , , | 3 Comments

Windows Server: Fix for (Kerberos) LSASS memory leak through March 2024 updates

Posted on 2024-03-23 by guenni

[German]On March 22, 2024, Microsoft released a special update with a fix for Windows Server that eliminates an LSASS memory leak caused by the March 2024 updates. I had reported here in the blog that on some systems Kerberos requests … Continue reading →

Posted in issue, Security, Update, Windows | Tagged , , , , | 5 Comments