[German]A small addendum to the July 2024 patchday at Microsoft. With the security updates, Microsoft has also closed an MSHTML spoofing vulnerability. There was information that this vulnerability (CVE-2024-38112) was and is being exploited by malware. The vulnerability is in Internet Explorer components and there is currently controversy because ZDI classifies the vulnerability as more critical than Microsoft has done.
[German]There are some issues with the security updates that Microsoft rolled out for Windows on July 9, 2024. I have received some reports that the Remote Desktop Gateway service is broken under some Windows versions (Windows Server 2019, Windows Server 2022) and regularly crashes. This prevents remote connections. A blog reader has now pointed me to a possible workaround that keeps the Remote Desktop Gateway service alive, so that the uninstallation of the July 2024 security update in question may not be necessary.
[German]Research by several German media outlets reveals that US data brokers are offering the locations of cell phone users in Germany. Some of the data can even be accessed free of charge, as research by netzpolitik.org and BR shows. A data set with 3.6 billion entries reveals precise movement profiles and a new dimension of mass surveillance.
[German]On July 9, 2024, Microsoft also released the update KB5040711 (Security Update for Microsoft OLE DB Driver for SQL Server). However, I have received a reader report that an installation error occurs during the update installation. There are also reader reports of "hiccups" during the installation of SQL Server updates under Windows Server. Here is a quick overview of what has been reported to me – however, the errors do not appear to be widespread.
[German]The preview phase of the new Microsoft Outlook for Windows will end on August 1, 2024. The client in question will then be generally available for commercial accounts. However, users can still use the classic Outlook client, as the new Outlook for Windows lacks essential features and some things will not be implemented at all. Here is a look at the current status and some background information on what the switch to the new Microsoft Outlook for Windows means at the end of the day. Continue reading
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has fixed some annoying bugs in Windows 10 and Windows 11 in recent weeks (since the release of the preview updates at the end of June 2024) (these fixes can be found on this Microsoft website). The problem of jumping desktop icons has supposedly been fixed. A problem in the Windows 11 Update API has also been fixed. Microsoft has also fixed problems with the taskbar in Windows 11 and a bug that triggered restarts. Here is a summary of the fixes that were classified as fixed on July 9, 2024 or as "Mitigated" on July 12, 2024.
[German]Security researchers have disclosed the Blast RADIUS vulnerability. In this context, Microsoft has released security updates for its Windows systems. I have now received a user report that certain Radius authentications no longer work after installing the July 2024 updates. Here is an overview and the question of whether this is an isolated case or whether there are other cases.
[English]German security expert Lilith Wittmann discovered an unprotected API from Deutsche Telekom, that can be used, to retrieve details about landline connections via their internet access. She set up a website that can be used to retrieve data from Telekom's landline network connections. The IP address is sufficient, and the data obtained can be used to permanently track Telekom subscribers on the Internet. This could be a veritable data breach at Deutsche Telekom – and it could be GDPR-relevant. Here's a quick rundown of what's going on.
Continue reading
[German]With the security updates of July 9, 2024, Microsoft has patched some bugs and vulnerabilities in the relevant Windows versions. However, I have received reports from readers that the July 2024 updates are causing problems with the print service. Users report that the LPD service crashes after the first printout. Printing is then no longer possible – another problem with the July 2024 patchday.
[German]A small note for administrators whose users are using OutlookWeb Access (OWA) and are now complaining that emails that have been moved to other folders are suddenly appearing there several times. A reader has informed me that Microsoft is aware of the problem and is working on a fix. The fix has been rolled out.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
