Critical PuTTY vulnerability CVE-2024-31497 leaks private keys

Posted on 2024-04-18 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The free software PuTTY can be used to establish connections via Secure Shell, Telnet, remote login or serial interfaces with a server. However, there is a critical vulnerability in the software in question (CVE-2024-31497) that can be used to reconstruct private SSH keys. PuTTY versions 0.68 to 0.80 as well as other products (FileZilla for example) are affected. However, it is not enough to update the products to a patched version, as the keys may already be reconstructed.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Broadcom accommodates VMware customers with licenses; EU Commission sends questions

Posted on 2024-04-17 by guenni

[German]The ongoing criticism of VMware by Broadcom's licensing policy by customers may be having an impact. At least VMware by Broadcom has responded to the topic again with a blog post and wants to offer customers with perpetual licenses a "relieve". And EU competition authorities are responding to a formal complaint from CISPE and have sent Broadcom a series of questions around VMware licensing.
Continue reading →

Posted in Virtualization | Tagged , | Leave a comment

Citrix: License renewal currently not possible? VMware deprecates old web client

Posted on 2024-04-16 by guenni

[German]Question for Citrix users: Has anyone tried to renew licenses in the last few days? I have received information that there are "currently" problems getting license renewals from Citrix. And another reader has informed me that VMware is discontinuing their web client.

Continue reading →

Posted in Software | Tagged | Leave a comment

US CISA orders admins in authorities to mitigate the cyber risks of the Microsoft Cloud

Posted on 2024-04-15 by guenni

[English]On April 2, 2024, the US cybersecurity authority CISA issued a directive to the administrators of US authorities requiring them to "mitigate" or eliminate the cyber risks posed to customers by a hack of the Microsoft Cloud or the Microsoft email system by Midnight Blizzard by April 30, 2024. The background to this is that state actors were able to read the email communication between customers and Microsoft during the hack and that these emails probably also contained security information for customer systems.

Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment

VMware news: Multi-year subscriptions only? End-user products distribution under Omnissa

Posted on 2024-04-14 by guenni

[German]Here are some news about VMware by Broadcom. I have just been told that VMware by Broadcom could "soon" only accept subscriptions with terms of 3 or 5 years – but this has probably not yet been finalized. And the VMware end customer business sold by Broadcom is likely to operate under the name "Omnissa" in future.

Continue reading →

Posted in Software, Virtualization | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

VMware users: Attention, portal migration to Broadcom on April 30, 2024

Posted on 2024-04-13 by guenni

Stop - Pixabay[German]Brief information for administrators and users of VMware products. VMware by Broadcom has started to clean up its portfolio and change the licenses. For people who have not yet noticed this: At the end of April 2024, the old VMware portal, where the purchased licenses are managed, will be closed and moved to a new portal. In view of the upheaval, it is advisable to back up everything from the old portal that seems important.

Continue reading →

Posted in Virtualization | Tagged , | Leave a comment

Analyses: VMware acts as planned with licenses; switching to alternatives a problem

Posted on 2024-04-12 by guenni

[German]In the last few days I have come across some information about VMware by Broadcom, which I would like to summarize in a small analysis here in the blog for the interested readership. On the one hand, it looks as if VMware by Broadcom is taking a very targeted approach to licensing and pricing and wants "the big fish" as customers. I also came across an article that sheds light on what alternatives there actually are apart from VMware Cloud Foundation (VCF) & Co.

Continue reading →

Posted in Software, Virtualization | Tagged | Leave a comment

Unsecured Microsoft Azure Server exposes passwords etc. of Microsoft systems (Feb. 2024)

Posted on 2024-04-11 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researchers from SOCRadar have discovered an unsecured storage server on Microsoft Azure on which internal information about Microsoft's Bing search engine was stored. Well, the storage server, which was freely accessible to anyone, only contained unimportant stuff from Microsoft employees such as code, scripts and configuration files with passwords, keys and login data for accessing other Microsoft databases and systems.

Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment

Microsoft Office Updates (April 9, 2024)

Posted on 2024-04-11 by guenni

Update[German]On April 9, 2024 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Below you will find an overview of the available updates. Continue reading →

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Windows Server 2012 / R2 and Windows 7 (April 9, 2024)

Posted on 2024-04-10 by guenni

Windows[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on April 9, 2024. Support for Windows 7 SP1 and Windows Server 2008 R2 expired in January 2024. However, updates for Windows Embedded Standard 7 can be downloaded from the Microsoft Update Catalog. Here is an overview of these updates for Windows Server 2012/R2 and Windows Embedded Standard 7. Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment