[German]Microsoft has now had to confirm that Russian cyber spies from the Midnight Blizzard group not only had access to the email accounts of Microsoft management in January 2024. The attackers were also able to gain access to internal systems and access product source codes. Microsoft has indications that further accesses were made following the January 2024 hack, during which source code was also accessed.
[German]Microsoft has released another update of the Edge (Chromium) browser to version 122.0.2365.80 in the stable channel on March 7, 2024. It is a maintenance update that fixes bugs (Fixed a browser crash which occurred when the BrowsingDataLifetime policy was enabled). Vulnerabilities have also been closed (see).
[German]Quick question for the readership: Has anyone experienced problems after installing the February 2024 updates KB5034767 (Cumulative Security Update) and KB5034862 (Servicing Stack Update) for Windows Server 2016? I have received a reader message that there are problems with Azure AD.
[German]I came across information in various places today that Microsoft is (secretly) installing an update KB5001716 on Windows 10. It is a "preparatory update" so that the systems can switch to Windows 11. However, some users are receiving the installation error 0x80070643 in the installation history. Here is a brief overview of the situation.
Google has released an update of the Google Chrome browser (to version 122.0.6261.111/.112) in the stable channel on March 5, 2024. The update fixes four vulnerabilities. The announcement with details can be found on the Google blog.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Are you tired of being bullied by VMware with regard to virtualization solutions or is the discontinuation of VMware ESXi already foreseeable? Many users are flirting with Proxmox as an alternative. A blog reader took a look at it and sent me his impressions of a test. I'll post the whole thing here in the blog.
[German]On March 5, 2024 (first Tuesday of the month), Microsoft released non-security updates for Microsoft Office 2016 and Excel. Here is some information about this update.
[German]Broadcom has bought VMware and cleaned up the product portfolio and changed the licensing of various products. I have documents with internal licensing guidelines that show the effects of these changes. It has also become known that, after Dell, Lenovo is also withdrawing from the sale of VMware licenses for the time being (until the chaos clears up). And there is a new version of VMware Workstation with amazing insights. I have also included two tips on VMware Player.
[German]The hack of numerous (US) authorities and companies via Solarwinds software in 2020 is probably still fresh in the minds of many readers. Now the Semperis security research team has discovered a new variant of "golden SAML", an attack technique that exploits the SAML authentication protocol and was used against Solarwinds by the hacker group Nobelium in 2020. The attack technique is known as "Silver SAML".
[German]In February 2024, Microsoft closed the vulnerability CVE-2024-21338 in the kernel of Windows 10/11 and various Windows Server versions. Great! The flaw in the story: The vulnerability was reported by AVAST in August 2023, and the vulnerability was exploited as a 0-day at that time.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
