[German]Security researchers have disclosed the Blast RADIUS vulnerability. In this context, Microsoft has released security updates for its Windows systems. I have now received a user report that certain Radius authentications no longer work after installing the July 2024 updates. Here is an overview and the question of whether this is an isolated case or whether there are other cases.
[English]German security expert Lilith Wittmann discovered an unprotected API from Deutsche Telekom, that can be used, to retrieve details about landline connections via their internet access. She set up a website that can be used to retrieve data from Telekom's landline network connections. The IP address is sufficient, and the data obtained can be used to permanently track Telekom subscribers on the Internet. This could be a veritable data breach at Deutsche Telekom – and it could be GDPR-relevant. Here's a quick rundown of what's going on.
Continue reading
[German]With the security updates of July 9, 2024, Microsoft has patched some bugs and vulnerabilities in the relevant Windows versions. However, I have received reports from readers that the July 2024 updates are causing problems with the print service. Users report that the LPD service crashes after the first printout. Printing is then no longer possible – another problem with the July 2024 patchday.
[German]A small note for administrators whose users are using OutlookWeb Access (OWA) and are now complaining that emails that have been moved to other folders are suddenly appearing there several times. A reader has informed me that Microsoft is aware of the problem and is working on a fix. The fix has been rolled out.
[German]An exciting story: everything is (at least it feels like it is) moving into the cloud. But the German companies that are already in the cloud are facing serious security problems. Security provider Tenable has taken a closer look and published its 2024 Cloud Security Outlook. In short: most IT managers are planning to expand their company's cloud environments next year. However, there is a lack of feasibility, as those responsible have identified a lack of expertise as an obstacle to cloud migration.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Luca Casonato already pointed out an issue in connection with Chromium browsers on July 9, 2024. In the browser, all Google websites are granted full access to system data such as CPU usage, GPU utilization, memory usage and processor information via a hidden extension. Allows Google sites to provide detailed information about the system, which enables fingerprinting. Furthermore, this information can also benefit Google during debugging. This would be a violation of the Digital Markets Act (DMA). I'll extract the relevant information in a blog post. Continue reading
[German]I'm posting a curious reader observation here in the blog. It's about the auto-discovery of e-mail recipients in Outlook via the auto-discovery service in Microsoft Exchange. One reader noticed a crude problem in this context. Someone seems to have registered a subdomain that ends with .de.de and has been configured for autodiscover requests. The question arises as to why this approach was chosen – and whether a reader has a logical explanation. It certainly smells like cyber fraud to me.
[German]A blog reader contacted me by e-mail a few days ago because he was facing a problem. Various programs cannot be installed on his Windows (in this case the phonostar client and UnigetUI). The installation is aborted with a runtime error and the message that the installation is only valid for products that are installed. I'll take up the problem here in the blog, maybe one or the other reader is affected. Continue reading
[German]The security updates rolled out on the July 2024 patchday (e.g. KB5040442 for Windows 11, but also for the Windows 10 counterpart), there are issues on systems on which Bitlocker is activated. I got reports from several German blog readers, reporting that the systems suddenly ask for a Bitlocker key (the recovery key).
[German]There are isolated reports of issues in Windows caused by the July 2024 patchday security updates. Under Windows Server 2012 R2, there is a report that the Remote Desktop Virtualization Host Agent service under Hyper-V is broken (albeit due to the June 2024 update). And under Windows Server 2022, the Remote Desktop Gateway service is broken on some systems and crashes regularly. Remote connections are then no longer possible.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
