[German]On August 21, Google released an update of the Google Chrome browser (branch 128) in the stable channel, which closes 38n vulnerabilities (some of them critical). One vulnerability is already under attack. The Extended Stable Channel and the apps for Android and iOS have also received an update. Here is an overview of these updates. Continue reading
[German]Microsoft is not yet abandoning its AI feature "Recall" in Windows. After a real PR disaster when this feature was announced in May 2024, the project was scrapped and Microsoft wanted to reconsider. In an update on August 21, 2024, Microsoft has now announced that Recall for Copilot+ PCs will be made available again as a preview for Windows Insiders from October 2024. However, details will not be available until October 2024, when the feature in question will be made available in the Windows Insider Program (WIP) – presumably for Windows 11.
[German]I'll pull out one topic separately, which was brought to my attention by readers in comments and also directly by email. Administrators who installs the security updates from the August 2024 patch day (August 13, 2024) on their Windows systems (clients, servers) could run into the problem, that new Item-Level Targeting in GPOs is broken. Here is some information about this problem.
[German]Users who use Windows and Linux via Secure Boot on computers are likely to have a problem since August 13, 2024. Microsoft has changed something in the boot process with the August 2024 Patchday and switched boot entries from DBX to Secure Boot Advanced Targeting (SBAT). As a result, Linux installations on the affected systems no longer start in Secure Boot mode. Imho, this means switching off Secure Boot mode and waiting for updated Linux distributions.
[German]Brief note for administrators who use the load balancer LoadMaster from Progress Kemp. The provider issued a warning about a vulnerability CVE-2024-7591 in August 2024. Kemp will publish details later. Administrators using the product should update immediately.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Users of Microsoft Outlook 365 (version 2407 build 17830.20138 and higher) occasionally report that the application crashes. This is caused by corrupted, server-based rules for the Microsoft 365 email account. Microsoft has now published a workaround to temporarily fix this problem.
[German]Brief information for administrators of Amazon AWS and Citrix Workspace app environments. A reader pointed out to me that there are probably issues with the Workspace app when Intel XE graphics chips are used. The problem has been known since 2021, as I have seen, but it seems it's back in 2024. However, there is a workaround to fix these issues caused by graphics hardware acceleration. Below are a few information in the blog – maybe it will help one or the other administrator.
[German]Since July 2024, users reported increasingly that the update function of Microsoft Office Click2Run installations is broken. Error code 30088-27 is reported when trying to update Office. A blog reader got in touch and gave some hints as to what the problem was for him and what was tried to fix it. According to his statement, Microsoft changed the communication method for Office updates with Click2Run in June 2024. I also got reports from German users, that MS Office Click2Run update "magically" startet today (August 17, 2024) to work again.
[German]A small follow-up to the August 13, 2024 patchday, where the 0-day remote code execution vulnerability CVE-2024-38063 in the TCP/IP implementation of Windows became known. Attackers can compromise a host via IPv6 packets and execute code there. Based on the CVEv3 score of 9.8 (critical, "Exploitation More Likely"), Redmond recommends that administrators currently disable IPv6, but Microsoft has also provided security updates for Windows.
[German]A small addendum to the August 2024 patchday regarding Bitlocker. With the July 2024 updates, there was the problem that systems remained in a query for the Bitlocker recovery key on the next restart. Good for those who had the corresponding key ready. With the security updates from August 13, 2024, Microsoft now claims to have fixed this Bitlocker query bug in all affected Windows versions. Ultimately, however, only the cause was removed by deactivating the July 2024 patch. Anyone wishing to eliminate the CVE-2023-24932 vulnerability must intervene manually.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
