[German]On January 9, 2024, Microsoft released security updates for Windows clients and servers, for Office and for other products. The security updates eliminate 48 vulnerabilities (CVEs), two of which are critical vulnerabilities. Below is a compact overview of these updates that were released on Patchday.
Continue reading
[German]The vulnerability CVE-2024-0193, which allows root access, was discovered in the Linux kernel. This is a use-after-free error in the Netfilter subsystem, which was given a CVSS score of 7.8. However, the vulnerability can only be exploited by local attackers to escalate privileges and execute arbitrary code. More details can be found in this article.
[German]DThe developers of Thunderbird have released another update of the email client to version 115.6.1 on January 8, 2024. It is an update that is intended to fix some bugs and vulnerabilities.
[German]On January 9, 2024, the Mozilla developers released the Firefox update Firefox 121.0.1. It is a maintenance update that fixes some bugs.
[German]In the USA, an iPhone and another smartphone were found to have survived a free fall from a height of around 4.8 km from an airplane in which a door had broken off in flight. The iPhone was even still working after the fall – Apple marketing will be pleased.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Brief short note before the first patchday in 2024: Microsoft is carrying out hardening measures for Windows (clients and servers) over longer periods of time, where functions are secured via Windows Update on certain dates. Some of these hardening measures are also scheduled for 2024, with the final enforcement phase for the Active Directory (AD) permissions problem starting on December 15, 2023.
[German]Microsoft is working on new features for Windows 11 that will be rolled out as a feature drop update in spring 2024. This package, which has also been referred to as the Moments 5 update for Windows 11 23H2, is expected to be released on Patchday in April 2024. There is even speculation that it could be traded as 24H1 – but I personally think this is unlikely.
[German]With the August 2023 security update, Microsoft closed the Outlook spoofing vulnerability CVE 2023 36893. As a result, the desktop application was no longer able to display images in meeting elements. In addition, the meeting text has been read-only since this date if calendar items from other senders are used for Microsoft Outlook. Microsoft already addressed this problem in Outlook at the end of November 2023 and described and rolled out workarounds. In January 2024, the last Outlook 365 channels will receive the fix.
[German]Microsoft has released another security update for the Edge (Chromium) browser with version 120.0.2210.121 on January 5, 2024. It is a security update that is intended to close vulnerabilities. Thanks to the readers for pointing this out in the blog.
Continue reading
[German]The Swedish Coop supermarket group has probably fallen victim to another cyberattack. I read a few days ago that the ransomware group Cactus, which has been operating since 2023, listed Coop as a victim on its Tor leak page. In the meantime, Coop has probably confirmed that ransomware has infected the stores in the Värmland region. In 2021, 800 Coop stores in Sweden stopped working because a cyberattack on a checkout operator had paralyzed them.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
