[German]Short alert to clarify who is affected and to warn that something is up. At the moment there seem to be massive problems with Windows Server and especially with RDS Server when ESET Server Security is installed. The systems with Windows Server simply crash when the relevant ESET Server Security is installed. Here is some information as far as I have it.
[English]Since the end of November 2023, users have reported that an "HP Smart" printer app has suddenly been installed on their systems with Windows 10 and Windows 11. In addition, the entries for printers (icon, name) may have changed under Windows. Microsoft has now confirmed the facts as of December 4, 2023 and has set about analyzing the problem. Here is a brief overview of the status.
[German]Microsoft has released the optional cumulative (preview) update KB5032288 for Windows 11 version 22H2 and 23H2 on December 4, 2023. Looks like this preview update was not ready in November 2023 and is now available in December. The preview update brings a number of fixes and rolls out the preview for Copilot again.
[German]CVE-2023-23397 is a vulnerability in Microsoft Outlook that could be exploited in conjunction with Microsoft Exchange servers, which was closed with security updates in March 2023. Microsoft has now identified an attacker based in Russia who is actively exploiting CVE-2023-23397 to gain unauthorized access to email accounts in Exchange servers. This can then be used for NTLM relay attacks against other services. The Russian attacker is referred to by Microsoft as Forest Blizzard (STRONTIUM, APT28, FANCYBEAR).
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
In September 2023 there was the "Nullcon Security Conference" in Goa. I was invited this year, but unfortunately (as with so many other conferences) I was unable to attend (which is better from an environmental point of view). But the organizers kept their word and informed me afterwards at the end of November 2023 that the recordings of the lectures are now online. Interested readers can find the slides of the presentations on this website.
[German]Looks like we're heading for the next cyberattack disaster. Network scans by security researchers have found around 20,000 Microsoft Exchange servers that are accessible via the internet and vulnerable to remote code attacks. The Exchange servers are located in Asia, Europe and the USA and can no longer be patched as they have reached the end of their life cycle and have fallen out of support. A worthwhile target for cyber attackers, who can no longer keep up as quickly as security gaps grow on the Internet.
[German]I recently recognized that the Turbo Pascal development environment was introduced by Borland 40 years ago. But it completely passed me by. I myself only came into contact with Turbo Pascal around 1987/1988. Today, a brief look back for the somewhat older blog readers.
[German]Support for Windows 10 will expire for most systems at the end of 2025. Something should therefore happen in 2024 in terms of a "successor". I think it's safe to assume that a feature update for Windows 11 will be released in 24H2 – unless hell freezes over in Redmond because the co-pilot has taken over. Interesting fact: Microsoft also seems to be planning something in the direction of "Managed Service Accounts" to prevent Kerberoasting attacks on network environments. And there has long been a rumor that Microsoft is working internally on a "Windows 12". Rumor has it that manufacturers will receive this Windows as early as 2024 in order to develop devices and possibly launch them on the market in July 2024. The development of this Windows will then move towards more online and more AI features.
[German]Does anyone operate a Zyxel NAS in their environment? The Taiwanese manufacturer has just warned of several vulnerabilities in the firmware of these devices. Three critical vulnerabilities allow an unauthenticated attacker to execute operating system commands on vulnerable network-attached storage (NAS) devices. Firmware updates for the affected devices are available to close these vulnerabilities.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
