Windows: cURL 8.4.0 update coming on November 14, 2023 patch day

Posted on 2023-11-14 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]There is a vulnerability in the cURL library and tool in older versions, which was closed by the project on October 11, 2023 with version 8.4.0. Microsoft delivers cURL with Windows, but has not yet updated this version. My understanding is that Windows still contains the outdated cURL version after the October 2023 updates. I have now received information that Microsoft intends to deliver cURL 8.4.0 with the Windows updates on November 14, 2023.

Continue reading →

Posted in Security, Software, Update, Windows | Tagged , , , | Leave a comment

QNAP warns of vulnerabilities CVE-2023-23368, CVE-2023-23369 in QTS

Posted on 2023-11-13 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Catching up from last week – the NAS manufacturer QNAP has published a security warning for its QTS operating system for NAS stations. The critical vulnerability CVE-2023-23368 (CVSS Index 9.8) allows remote execution of commands in older QTS versions. Another vulnerability CVE-2023-23369 (CVSS Index 9.0) also allows remote attacks. Updates are available to close the vulnerability. Here is an overview of this issue.

Continue reading →

Posted in devices, Security, Software, Update | Tagged , | Leave a comment

Stop: BlueSky fake invites dropping malware

Posted on 2023-11-13 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Since Elon Musk took over Twitter and renamed it X, the social network BlueSky, created by Twitter co-founder Jack Dorsey, has experienced a boom. Access is currently only possible via invite code – i.e. recommendations from people who are represented on BlueSky. I have now come across a warning that there are mails on the way that pretend to be an invitation to BlueSky, but are ultimately intended to be used to spread malware (Trojans) or for phishing. If you need a BlueSky Invite, you can get it here on borncity.com for free and without risk. I currently have free codes available again.

Continue reading →

Posted in Security | Tagged | 6 Comments

When ransomware groups offers security tips

Posted on 2023-11-13 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Interesting story: I have noticed a post on BlueSky that mentions a special goody for cybersecurity victims.  After an attack, when a victim received the decryptor and the key to decrypt his files, he asked if he could have a "security report" that would reveal how the IT network had been penetrated. And the victim did indeed receive some clues.

Continue reading →

Posted in Security | Tagged | Leave a comment

Beware: New Outlook app transfers access data to Microsoft

Posted on 2023-11-12 by guenni

[German]I'm picking up on an (actually old) topic here in the blog, which is becoming virulent again with the new Outlook app introduced by Microsoft. The new Outlook app transfers all (actually secret) access data for mail accounts to Microsoft in the cloud. The topic has already been raised as a question by readers and has now become "virulent" thanks to an article by our colleagues at German site heise.

Continue reading →

Posted in Office, Security, Software | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Dolly.com pays ransom, but the data was published anyway

Posted on 2023-11-12 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The US platform Dolly.com has fallen victim to a ransomware attack. The company paid to avoid publishing data. However, the cyber criminals were not satisfied and published the captured data anyway, as research shows.

Continue reading →

Posted in Security | Tagged | Leave a comment

Windows Server 2012/R2 gets Extended Security Updates (ESU) until October 2026

Posted on 2023-11-11 by guenni

Windows[German]With the October 2023 updates, Windows Server 2012 and Windows Server 2012 R2 have reached their end of support; there will be no more security updates in the future. Unless you book an Extended Security Update Extension (ESU license). Recently, there was still confusion because this ESU license was not to be provided for on-premises systems. Microsoft has now published or updated some details about the ESU program for Windows Server 2012/R2.

Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment

Windows Server 2022: VMware ESXi problems confirmed by Microsoft update KB5031364, temporary fix

Posted on 2023-11-11 by guenni

Windows[German]The October 2023 updates for Windows Server 2022 (KB5031364) are probably causing issues with VMware ESXi. Virtual machines (VMs) running on VMware ESXi hosts may not be able to start Windows 2022 (as a guest). Affected VMs trigger a blue screen. Microsoft has now acknowledged these problems for KB5031364 in the list of known issues for Windows Server 2022 and proposes a temporary fix. Continue reading →

Posted in issue, Virtualization, Windows | Tagged , , , , | Leave a comment

Edge 119.0.2151.58 / 118.0.2088.102

Posted on 2023-11-11 by guenni

Edge[German]On November 9, 2023, Microsoft released both an update of the Chrome browser in the Extended Stable to 118.0.2088.102 and an update to Edge 119.0.2151.58. Thanks to the reader for the tip. Here is some information about the update.

Continue reading →

Posted in browser, Security, Software, Update, Windows | Tagged , | Leave a comment

WordPress 6.4 update destroys (some) responsive themes on mobile devices – a quick fix

Posted on 2023-11-11 by guenni

[German]With the update to WordPress 6.4 on November 7, 2023, the display of (some) responsive themes on mobile devices was broken. This also affected my blogs. In my estimation, a bug fix will only come with WordPress 6.4.3. However, there is now a quick fix in the form of a plugin, which I have included in the blog. I'll quickly document the problem and the fix below – perhaps it will help others.

Continue reading →

Posted in issue, Software | Tagged , | Leave a comment