Cloud expansion jeopardized by lack of security know-how?

Posted on 2024-07-14 by guenni

[German]An exciting story: everything is (at least it feels like it is) moving into the cloud. But the German companies that are already in the cloud are facing serious security problems. Security provider Tenable has taken a closer look and published its 2024 Cloud Security Outlook. In short: most IT managers are planning to expand their company's cloud environments next year. However, there is a lack of feasibility, as those responsible have identified a lack of expertise as an obstacle to cloud migration.

Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment

User identification via Chromium browser (Chrome, Edge, Brave)?

Posted on 2024-07-13 by guenni

[German]Luca Casonato already pointed out an issue in connection with Chromium browsers on July 9, 2024. In the browser, all Google websites are granted full access to system data such as CPU usage, GPU utilization, memory usage and processor information via a hidden extension. Allows Google sites to provide detailed information about the system, which enables fingerprinting. Furthermore, this information can also benefit Google during debugging. This would be a violation of the Digital Markets Act (DMA). I'll extract the relevant information in a blog post. Continue reading →

Posted in browser, Security | Tagged , | Leave a comment

Outlook to Exchange auto-discovery and the duplicate .com.com domain

Posted on 2024-07-13 by guenni

Mail[German]I'm posting a curious reader observation here in the blog. It's about the auto-discovery of e-mail recipients in Outlook via the auto-discovery service in Microsoft Exchange. One reader noticed a crude problem in this context. Someone seems to have registered a subdomain that ends with .de.de and has been configured for autodiscover requests. The question arises as to why this approach was chosen – and whether a reader has a logical explanation. It certainly smells like cyber fraud to me.

Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Windows: Runtime-Error "This action is only valid for products that are currently installed"

Posted on 2024-07-13 by guenni

Windows[German]A blog reader contacted me by e-mail a few days ago because he was facing a problem. Various programs cannot be installed on his Windows (in this case the phonostar client and UnigetUI). The installation is aborted with a runtime error and the message that the installation is only valid for products that are installed. I'll take up the problem here in the blog, maybe one or the other reader is affected. Continue reading →

Posted in issue, Software, Windows | Tagged , , | Leave a comment

Windows 10/11 updates (e.g. KB5040442) triggers Bitlocker queries (July 2024)

Posted on 2024-07-12 by guenni

Windows[German]The security updates rolled out on the July 2024 patchday (e.g. KB5040442 for Windows 11, but also for the Windows 10 counterpart), there are issues on systems on which Bitlocker is activated. I got reports from several German blog readers, reporting that the systems suddenly ask for a Bitlocker key (the recovery key).

Continue reading →

Posted in issue, Update, Windows | Tagged , , , , | 1 Comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Windows July 2024 updates break remote connections

Posted on 2024-07-12 by guenni

Windows[German]There are isolated reports of issues in Windows caused by the July 2024 patchday security updates. Under Windows Server 2012 R2, there is a report that the Remote Desktop Virtualization Host Agent service under Hyper-V is broken (albeit due to the June 2024 update). And under Windows Server 2022, the Remote Desktop Gateway service is broken on some systems and crashes regularly. Remote connections are then no longer possible.

Continue reading →

Posted in issue, Update, Windows | Tagged , , , | 12 Comments

Outlook 365 reports conflict error when updating or canceling meetings

Posted on 2024-07-12 by guenni

[German]Since the beginning of June 2024, Microsoft and Outlook users have been struggling with a nasty bug that makes managing meetings a pain. Whenever a user wants to update or cancel a meeting, they are met with a conflict error. Following a tip from a reader, I would like to take this up briefly in the blog.

Continue reading →

Posted in issue, Office | Tagged , | Leave a comment

Windows 11 update KB5040442 causes issues with Outlook 2021

Posted on 2024-07-11 by guenni

[German]Quick question for the readership: Are there any problems with Windows 11 23H2 if the preview update KB5039302 from June 2024 or the security update KB5040442 from July 2024 is installed? I have received reports that links can no longer be opened in Outlook 2021. There are also problems with third-party applications that rely on Outlook and the MAPI interface.

Continue reading →

Posted in issue, Office, Update, Windows | Tagged , , , , | 1 Comment

Microsoft Office Updates (July 9, 2024)

Posted on 2024-07-11 by guenni

Update[German]On July 9, 2024 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Below you will find an overview of the available updates. Continue reading →

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Blast RADIUS attack enables RADIUS authentication to be bypassed

Posted on 2024-07-10 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A vulnerability (CVE-2024-3596) discovered by security researchers makes it possible to log into a network using the RADIUS network authentication protocol without further authentication. The vulnerability, called Blast-RADIUS, could jeopardize network security in companies because RADIUS network authentication can be circumvented.

Continue reading →

Posted in Security, Software, Windows | Tagged , , | Leave a comment