Windows 10 22H2 Preview Update KB5031445 (October 26, 2023)

Windows[German]Microsoft has released an optional cumulative (preview) update KB5031445 for Windows 10 22H2 on October 26 (D-Week). This is supposed to fix numerous bugs in Windows 10 22H2. Below I provide an overview regarding these updates for Windows 10. Continue reading

Posted in Update, Windows | Tagged , | Leave a comment

Windows 11 22H2: Preview Update KB5031455 (October 26, 2023)

Windows[German]Microsoft has released the optional cumulative (preview) update KB5031455for Windows 11 version 22H2 on October 26, 2023. This brings a number of fixes (similar to the preview update for Windows 11 21H2). Below I give an overview regarding these (Moments 4) updates for Windows 11. According to user reports, the update seems to correct the problem of the shadow font that cannot be switched off.

Continue reading

Posted in Update, Windows | Tagged , | Leave a comment

Vulnerability CVE-2023-5363 in OpenSSL

Sicherheit (Pexels, allgemeine Nutzung)[German]A vulnerability CVE-2023-5363 was found in the OpenSSL software. The initialization of the encryption key length and the initialization vector in OpenSLL is incorrect. However, a fix is already available for the Linux distributions Debian and Ubuntu.

Continue reading

Posted in Security, Software | Tagged , | Leave a comment

Piriform CCleaner victim of MOVEit transfer vulnerability

Sicherheit (Pexels, allgemeine Nutzung)[German]The vulnerability in Progress Software's Managed File Transfer (MFT) solution MOVEit, which was disclosed in May 2023, has also affected CCleaner customers of the vendor Priform (bought by AVAST and owned by Gen Digital). Piriform has just admitted to a data leak due to the MOVEit vulnerability.

Continue reading

Posted in Security, Software | Tagged | Leave a comment

Citrix Bleed: Vulnerability CVE-2023-4966 leaks session tokens in NetScaler ADC and Gateway, PoC available

Sicherheit (Pexels, allgemeine Nutzung)[German]I would guess that Citrix users on unpatched instances are "under fire" once again, because more information is now available on the recently disclosed vulnerability CVE-2023-4966. Under the term "Citrix Bleed", security researchers have described how Citrix NetScaler ADC and Gateway leaked session tokens to attackers and presented a proof of concept (PoC). Citrix had published vulnerability advisories in early October 2023.

Continue reading

Posted in devices, Security | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


0patch Micropatches for Microsoft Office security feature bypass (CVE-2023-33150)

[German]ACROS Security released a micropatch on Oct. 24, 2203, to address a Microsoft Office Security Feature Bypass (CVE-2023-33150) vulnerability in Office versions 2010 and 2013, which are no longer in support.

Continue reading

Posted in Office, Security | Tagged , | Leave a comment

Edge 118.0.2088.69 (Oct. 24, 2023)

Edge[German]Microsoft has updated the Edge browser in the stable channel to version 118.0.2088.69 on October 24, 2023 (thanks to the reader for pointing this out). The release notes say "fixed various bugs and performance issues". However, it is a feature update to the browser at the same time.

Continue reading

Posted in browser | Tagged | Leave a comment

Exchange Online: Missing confirmations for rooms bookings

[German]Currently users are facing many issues with Exchange Online. German blog reader Georg emailed me yesterday (October 25, 2023) about an annoying bug in Exchange Online: They don't get any confirmations / rejections sent for rooms bookings in Exchange Online since a week.  Continue reading

Posted in Cloud, issue | Tagged , , | Leave a comment

Google Chrome 118.0.5993.117/.118

Chrome[German]Google has released updates to Google Chrome Browser 118 in the Stable and Extended channels for Mac, Linux, and Windows as of October 24, 2023. The Chrome browser's Android app has also been updated. The updates include a security fix,. Here is an overview of these updates. And there is a reference to Google`s planned IP protection feature, that has been just announced.
Continue reading

Posted in browser, Security, Update | Tagged | Leave a comment

Exchange Online show foreign address lists (GAL) – a GDPR violation

[German]A reader pointed out to me a strange and dubious behavior of Exchange Online. It has been observed that users are offered global address lists (GAL) from other tenants as soon as people try to fill out the To field in an email or appointment. In any case, it is problematic under the European GDPR (General Data Protection Regulation).

Continue reading

Posted in Cloud, Security | Tagged , , , | Leave a comment