Microsoft removes the falsely "Edge installed" Copilot app from Windows

Edge[German]Along the lines of "We made a mistake", Microsoft rolled out the Copilot app to Windows (Windows 10/11 clients and Windows Server 2022) in March 2024 with an "accidental" Edge update. Redmond has since "cleaned up" and gradually uninstalled the "unintentionally" installed Copilot app from all affected Windows versions.

Continue reading

Posted in browser, issue, Software, Update | Tagged , , , | Leave a comment

Outlook RCE vulnerability CVE-2024-30103 fixed in June 2024

[German]With the security updates of June 11, 2024, Microsoft has also closed a critical vulnerability in Microsoft Outlook. The vulnerability CVE-2024-30103 allows remote code execution when opening an email. Patching is strongly recommended.

Continue reading

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Whistleblower: Microsoft ignored warnings about AD bug; was exploited in 2020 SolarWinds hack

Sicherheit (Pexels, allgemeine Nutzung)[German]We all know that security has been a priority at Microsoft for years – no kidding. And every Windows is the best and most secure Windows ever. Whistleblower and ex-employee Andrew Harris says Microsoft ignored his warnings about an Active Directory flaw for years. In 2020, Harris left the company, and in 2020 the SolarWinds hack probably occurred via this vulnerability. At Microsoft, features and gimmicks take precedence over security. These are serious allegations, but they sound plausible.

Continue reading

Posted in Cloud, Security | Tagged , | Leave a comment

Windows 11 Copilot+PC will be released without recall

Windows[German]What a PR disaster for Microsoft – next week, devices with the "Copilot+PC" concept are to be launched on the market. But the most important function "Windows Recall", which Microsoft recently praised as the "philosopher's stone of AI", will be missing. There is the recall of Recall, which is now haunting the web as a meme. The pressure and outcry from security experts regarding this function was probably too big.

Continue reading

Posted in Windows | Tagged , | Leave a comment

Windows 11: Microsoft blocks bypass for local account during setup

Windows[German]Microsoft seems to have started blocking the solutions for creating a local user account during setup. The option of simply entering an invalid e-mail address in the step to set up a Microsoft account and thus accessing the mask to create a local user account no longer works in new Windows 11 builds. Fortunately, there are still ways to force a local user account during the Windows 11 setup.

Continue reading

Posted in issue, Windows | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Crown Equipment victim of a cyber attack? – sites and production down

Sicherheit (Pexels, allgemeine Nutzung)[German]According to my information, the forklift manufacturer, Crown Equipment Corporation, has been the (possibile) victim of a cyber attack. The websites are no longer accessible – and employees are being sent home. Production plants has been shut down since Monday, June 10, 2024). In the USA, it is said that people have not been paid either. Officially, the company is tight lipped – here is the information I have researched.

Continue reading

Posted in Security | Tagged | 31 Comments

Windows: DirectAccess discontinued; Always On VPN recommended

Windows[German]Since Windows 7 and Windows Server 2008 R2, DirectAccess has enabled clients to connect to corporate networks without installing a VPN. Microsoft has now declared DirectAccess as deprecated in Windows. As of June 2024, there is a new entry in the list of deprecated features. DirectAccess is obsolete and will be removed in a future version of Windows. Microsoft recommend to migrate from DirectAccess to Always On VPN.

Posted in Windows | Tagged | Leave a comment

Windows June 2024 updates: LSass bug fixed; AuthLite on domain controllers broken and more

Windows[German]On June 11, 2024, Microsoft released its security updates for this month. The updates fix the LSass bug (memory leak), update Curl.exe and bring some other changes. But I have received an initial report of installation problems. And under Windows Server (2016 – 2022), the June 2024 update ensures that AuthLite (2FA authentication) no longer works on domain controllers. Anyone using the module should therefore not install the update yet.

Continue reading

Posted in issue, Security, Update, Windows | Tagged , , | 2 Comments

Microsoft Office Updates (June 11, 2024)

Update[German]On June 11, 2024 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Below you will find an overview of the available updates.
Continue reading

Posted in Office, Security, Update | Tagged , , , | 1 Comment

Windows Server 2012 / R2 und Windows 7 (June 11, 2024)

Windows[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on June 11, 2024. Support for Windows 7 SP1 and Windows Server 2008 R2 expired in January 2024. However, updates for Windows Embedded Standard 7 can be downloaded from the Microsoft Update Catalog. Here is an overview of these updates for Windows Server 2012/R2 and Windows Embedded Standard 7. Continue reading

Posted in Security, Update, Windows | Tagged , , , | Leave a comment