[German]Security provider Bitdefender has informed me that security researchers in its labs have found vulnerabilities in Bosch BCC100 thermostats. Hackers can use these vulnerabilities to take control of such smart thermostats and gain access to smart home networks. The experts at Bitdefender Labs have described a specific possible attack on smart thermostats from the manufacturer Bosch in a study.
[English]Another addendum from the January 2024 patchday for Microsoft SharePoint Server. I mentioned the SharePoint Server RCE vulnerability CVE-2024-21318 in the patchday articles. This was closed with the security updates of January 9, 2023. There is a second Elevation of Privilege vulnerability CVE-2023-29357, which was already closed in June 2023 and for which an exploit is known. The US CISA has published a warning because attacks on RCE vulnerabilities have been observed in the meantime. Administrators should therefore ensure that their SharePoint servers are up to date with the latest patches.
[English]These are currently difficult times for customers and resellers of VMware products who want to reorder, extend licenses or simply activate product licenses. After the Broadcom takeover, absolute chaos reigns. Dealers have been terminated, orders via OEMs are sometimes impossible, and the end customer portal for license activation has been shut down. After reporting on problems for the first time a few days ago, I now have internal information that confirms this. Incidentally, this is not the first incident in which Broadcom products and dealer/customer relationships have been "badly strained", to say the least, as I discovered when searching the blog.
[German]In December 2023, Microsoft released the Printer Metadata Troubleshooter Tool (KB5034510) to fix the HP Smart App issue. Shortly afterwards, following a tip from Stefan Kanthak, I reported on security problems with this tool here in the blog. Microsoft has now updated the Printer Metadata Troubleshooter Tool (KB5034510) as of January 9, 2024 to close the vulnerability now named CVE-2024-21325.
[German]I'm putting two Microsoft Office-related topics in this blog post. A reader asked me whether there are any known problems with the Office Deployment Tool – in his environment there are suddenly crashes. In addition, Microsoft is retiring the Readiness Toolkit for Office VBA AddIns.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has released another security update for the Edge (Chromium) browser with version 120.0.2210.133 on January 11, 2024. It is a security update that is intended to close vulnerabilities. Continue reading
[German]Is Broadcom starting the "shakeout" of VMware customers? After Broadcom terminated all VMware partners as of February 4, 2024, the OEM portal is now down. However, the VMware OEM portal is required to activate VMware licenses purchased through OEMs. A blog reader has just informed me about this disaster.
[German]Microsoft has today announced an important expansion of its EU data boundary for the Microsoft Cloud. Customers will be able to store and process all personal data within the EU. This brings Microsoft closer to the goal it announced last year of ensuring local storage and processing of personal data for its cloud products within the EU.
[German]Small addendum from this week. Microsoft points out in a post that mainstream support for Exchange Server 2019 ended on January 9, 2024. Before anyone panics, this has no consequences for the time being, as Exchange Server 2019 is still in (extended) support. Microsoft will also roll out two more CUs for Exchange Server 2019. Here is a brief overview of the status.
[German]Microsoft has released security updates for Windows 10 and Windows 11 (and Windows Server 2016, 2019, 2022) on January 9, 2024. This update also includes a fix (according to KB5034441) to eliminate the BitLocker Security Feature Bypass vulnerability CVE-2024-20666 in the WinRE partition. This is a disaster with an announcement, as the installation fails for many users with the installation error 0x80070643 (the WinRE partition is too small). Below I summarize the information that is now known.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
