Follow-up on CU 14 for Exchange 2019 and vulnerability CVE-2024-21410 (Feb. 2024)

Posted on 2024-02-16 by guenni

Exchange Logo[German]On February 13, 2024, a critical vulnerability CVE-2024-21410 in Microsoft Exchange Server became public. The Elevation of Privilege vulnerability has a CVEv3 score of 9.8 and is likely to be exploited (soon). Security authorities are warning about this vulnerability. However, there was confusion among the blog readership because as of February 13, there was only CU 14 for Exchange Server 2019, which does not explicitly close the vulnerability. What about Exchange Server 2016 and what do I need to do to be protected against CVE-2024-21410? Here is a review with a rough outline.

Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Windows 10: Update KB5034441 fails again with error 0x80070643 in February 2024

Posted on 2024-02-15 by guenni

Windows[German]Brief question to the readership, I have received initial reports that there are also installation problems in February 2024, around the patchday on February 13, 2024. The Win RE update KB5034441 for Windows 10 fails with the installation error 0x80070643. This error has already driven hordes of users to despair in January 2024. Here is a brief overview of what I have encountered so far.

Continue reading →

Posted in issue, Update, Windows | Tagged , , | 3 Comments

Microsoft Office Updates (February 13, 2024)

Posted on 2024-02-15 by guenni

Update[German]On February 13, 2024 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016 and other products. A critical vulnerability in Outlook will be closed in February 2024. Below you will find an overview of the available updates.
Continue reading →

Posted in Office, Security, Update | Tagged , , , | 1 Comment

Warning about critical Outlook RCE vulnerability CVE-2024-21413

Posted on 2024-02-15 by guenni

[German]I'll pull it out again separately: In Microsoft Outlook, a CVE-2024-21413 classified as critical has been disclosed, which will be closed with the February 2024 security updates. The remote code execution vulnerability is almost trivial to exploit. Here is some more information.

Continue reading →

Posted in Office, Security, Update | Tagged , , , | Leave a comment

Microsoft BUILD on May 21 – 23, 2024

Posted on 2024-02-15 by guenni

Microsoft plans to hold this year's BUILD developer conference from May 21-23, 2024 in Seattle at the Seattle Convention Center. The company announced this yesterday.

Continue reading →

Posted in General | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Google Chrome 122.0.6261.39/49; 121.0.6167.184 / .185

Posted on 2024-02-15 by guenni

Chrome[German]Google released updates to the Google Chrome browser (branch 121) in the stable channel on February 13 and 14, 2024. There were also updates for the 122 and 120 development branches. The Android and iOS app of the Chrome browser were also updated. Some of the updates contain security fixes. Here is an overview of these updates.
Continue reading →

Posted in browser, Security, Update | Tagged | Leave a comment

AnyDesk hack: Revoke chaos with old certificates? – Part 11

Posted on 2024-02-14 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Now that it is clear that the provider of remote maintenance software, AnyDesk, was the victim of a hack of its production environment in December 2023, a certificate change for the digital signing of AnyDesk clients is pending. According to my current observations, it is heading towards a "revoke chaos" – from Feb. 14, 2024, the old certificate of "philandro Software GmbH" will be invalid. Clients new signed with this old certificate should then no longer be able to run. By the way, have you noticed that the phrase "the hack took place at the end of December 2023" has also been canceled and is now referred to as "December 2023"?

Continue reading →

Posted in Security | Tagged | 1 Comment

Windows Server 2012 / R2 und Windows 7/Server 2008 R2 (February 13, 2024)

Posted on 2024-02-14 by guenni

Windows[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on February 13, 2024. Support for Windows 7 SP1 and Windows Server 2008 R2 expired in January 2024. However, updates for Windows Embedded Standard 7 can be downloaded from the Microsoft Update Catalog. Here is an overview of these updates for Windows Server 2012/R2 and Windows Embedded Standard 7.

Continue reading →

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment

Patchday: Windows 11/Server 2022 Updates (February 13, 2024)

Posted on 2024-02-14 by guenni

Windows[German]On February 13, 2024 (second Tuesday of the month, patch day at Microsoft), Microsoft also released cumulative updates for Windows 11 23H2 to 21H2. Windows Server 2022 also received an update. Here are some details about these updates, which are intended to fix vulnerabilities and problems. Continue reading →

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment

Patchday: Windows 10 Updates (February 13, 2024)

Posted on 2024-02-14 by guenni

Windows[German]On February 13, 2024 (second Tuesday of the month, patch day at Microsoft), various cumulative updates were released for the supported Windows 10 builds (from the RTM version to the current version) as well as for the Windows Server counterparts. Here are some details on the respective security updates for Windows 10.

Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment