Critical vulnerability CVE-2024-38428 in wget

Sicherheit (Pexels, allgemeine Nutzung)[German]There is a critical vulnerability in the command line program wget, which has a CVSS Base Score of 10.0. CERT-Bund warns of the vulnerability, which is contained in wget versions <=1.24.5. An attacker can carry out an unspecified attack. Anyone using wget under Linux or Windows should take urgent action and stop using the program. Because there is no updated version yet.

Continue reading

Posted in General | Leave a comment

Microsoft will better secure private Outlook mail accounts

[German]A few days ago, Microsoft made an announcement that it wants to better secure "Outlook for private users" in future. The mention of Outlook is a bit of a misnomer. The aim is to improve the security of online e-mail accounts such as Outlook.com, Hotmail.com and Live.com for private users. Authentication using a user name and password is to be replaced by two-factor authentication.

Continue reading

Posted in Cloud, Security | Tagged , , | Leave a comment

Copilot will be rolled out for Outlook Classic under Windows (June 2024)

[German]Microsoft announced last week that the AI assistant Copilot is now available in classic Outlook for Windows. The Copilot feature in classic Outlook for Windows is already available to most Microsoft 365 customers in the Current Channel or Monthly Enterprise Channel.

Continue reading

Posted in Office | Tagged , | Leave a comment

Microsoft engages in damage limitation at congressional hearing (13.6.2024): Safety takes priority over AI

Sicherheit (Pexels, allgemeine Nutzung)[German]Microsoft has had little to laugh about when it comes to security in recent months. The security disasters and the lack of a security culture have fallen on Redmond's shoulders in the form of veritable security incidents. In a hearing held by a US Congressional Homeland Security Committee on June 13, 2024, it became clear that Microsoft was responsible for a cascade of cybersecurity breaches that degenerated into cyber incidents. Microsoft's President, Brad Smith, tried to limit the damage. The statement to Congress: Microsoft's CEO, Satya Nadella, has taken personal responsibility for cyber security at the company. And security would take priority over AI in future – a remarkable statement, given that just a short time ago it was "the end of the world if a customer wasn't fully up and running with Microsoft's AI by three".".

Continue reading

Posted in Security | Tagged | Leave a comment

Microsoft removes the falsely "Edge installed" Copilot app from Windows

Edge[German]Along the lines of "We made a mistake", Microsoft rolled out the Copilot app to Windows (Windows 10/11 clients and Windows Server 2022) in March 2024 with an "accidental" Edge update. Redmond has since "cleaned up" and gradually uninstalled the "unintentionally" installed Copilot app from all affected Windows versions.

Continue reading

Posted in browser, issue, Software, Update | Tagged , , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Outlook RCE vulnerability CVE-2024-30103 fixed in June 2024

[German]With the security updates of June 11, 2024, Microsoft has also closed a critical vulnerability in Microsoft Outlook. The vulnerability CVE-2024-30103 allows remote code execution when opening an email. Patching is strongly recommended.

Continue reading

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Whistleblower: Microsoft ignored warnings about AD bug; was exploited in 2020 SolarWinds hack

Sicherheit (Pexels, allgemeine Nutzung)[German]We all know that security has been a priority at Microsoft for years – no kidding. And every Windows is the best and most secure Windows ever. Whistleblower and ex-employee Andrew Harris says Microsoft ignored his warnings about an Active Directory flaw for years. In 2020, Harris left the company, and in 2020 the SolarWinds hack probably occurred via this vulnerability. At Microsoft, features and gimmicks take precedence over security. These are serious allegations, but they sound plausible.

Continue reading

Posted in Cloud, Security | Tagged , | Leave a comment

Windows 11 Copilot+PC will be released without recall

Windows[German]What a PR disaster for Microsoft – next week, devices with the "Copilot+PC" concept are to be launched on the market. But the most important function "Windows Recall", which Microsoft recently praised as the "philosopher's stone of AI", will be missing. There is the recall of Recall, which is now haunting the web as a meme. The pressure and outcry from security experts regarding this function was probably too big.

Continue reading

Posted in Windows | Tagged , | Leave a comment

Windows 11: Microsoft blocks bypass for local account during setup

Windows[German]Microsoft seems to have started blocking the solutions for creating a local user account during setup. The option of simply entering an invalid e-mail address in the step to set up a Microsoft account and thus accessing the mask to create a local user account no longer works in new Windows 11 builds. Fortunately, there are still ways to force a local user account during the Windows 11 setup.

Continue reading

Posted in issue, Windows | Tagged , | Leave a comment

Crown Equipment victim of a cyber attack? – sites and production down

Sicherheit (Pexels, allgemeine Nutzung)[German]According to my information, the forklift manufacturer, Crown Equipment Corporation, has been the (possibile) victim of a cyber attack. The websites are no longer accessible – and employees are being sent home. Production plants has been shut down since Monday, June 10, 2024). In the USA, it is said that people have not been paid either. Officially, the company is tight lipped – here is the information I have researched.

Continue reading

Posted in Security | Tagged | 31 Comments