[German]After the March 2024 updates, a user contacted me because he was prompted to update his license in Microsoft Office 365. The topic has been left lying around for a while, but I'm including it here in the blog – perhaps there are other readers who are affected.
[German]Microsoft has released the optional cumulative (preview) update KB5036980 for Windows 11 version 22H2 and 23H2 on April 23, 2024. The preview update brings a number of fixes for these Windows 11 versions. It is an optional update whose fixes will be rolled out generally in the following month.
Continue reading
[German]Microsoft has released an optional cumulative (preview) update KB5036979 for Windows 10 22H2 on April 23 (D-Week). This is intended to fix numerous bugs in Windows 10 22H2 and brings minor new features (account-related notifications for Microsoft accounts). Below is an overview of these updates for Windows 10. Continue reading
[German]Microsoft released hotfix updates (HU) for Exchange Server 2016 and 2019 on April 24. These hotfix updates provide support for new features and are intended to resolve issues caused by the March 2024 Security Update (SU). Although the updates are optional, they bring some benefits to Exchange administrators (e.g. support for ECC certificates, Hybrid Modern Authentication (HMA) for OWA/ECP).
[German]I just reported how the Store team has started repackaging Store apps. An executable .NET wrapper is slapped around the store apps, which smuggles telemetry and other code into the app. This is intended to simplify the installation of store apps and save a click. And by the way, the Microsoft strategists have also opened up a DLL hijacking gap that can serve as a gateway for malware.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]The old print spooler vulnerability CVE-2022-38028 in Windows is probably the preferred target of the Russian hacker group Fancy Bear. This was revealed by Microsoft's analysis of an attack tool ('GooseEgg' malware). However, this attack vector can no longer be exploited on currently patched Windows operating systems, as Microsoft revealed in a blog post.
[German]CrushFTP is a proprietary file transfer server with multiple protocols and platforms (macOS, Linux, Windows) that is available as shareware with a tiered pricing model. It is aimed at home users through to corporate users. As of April 19, 2024, the provider has published a security warning that a critical vulnerability (CVE-2024-4040) has been discovered in the software, which is being exploited by attackers.
[German]Lousy security culture, products as full of holes as a Swiss cheese, but "to big to fail and everyone is dependent". That's a description of Microsoft – not mine, but the tenor of the statements made by the former White House Director of Cyber Policy, Andrew J. Grotto, in an interview with the British newspaper The Register.
[German]The move from Microsoft, which has just been uncovered and is causing anger among developers. Their Store team has started to secretly repackage Store apps. The apps are provided with an executable .NET wrapper that adds telemetry and other code into the app. Furthermore, .netfx 4.7.2 is currently being used – regardless of what .netfx version the app uses. The explanation I read, is that Microsoft now wants to offer .exe applications for download directly from the store in a simple way. Here is some information on this.
A Chinese manufacturer has inadvertently disclosed the data of surveillance devices. An unsecured database, which was freely accessible on the internet, contained 3 billion data records with details of surveillance systems from Chinese manufacturer Raysharp.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
