[German]Catching up from last week – the NAS manufacturer QNAP has published a security warning for its QTS operating system for NAS stations. The critical vulnerability CVE-2023-23368 (CVSS Index 9.8) allows remote execution of commands in older QTS versions. Another vulnerability CVE-2023-23369 (CVSS Index 9.0) also allows remote attacks. Updates are available to close the vulnerability. Here is an overview of this issue.
[German]Since Elon Musk took over Twitter and renamed it X, the social network BlueSky, created by Twitter co-founder Jack Dorsey, has experienced a boom. Access is currently only possible via invite code – i.e. recommendations from people who are represented on BlueSky. I have now come across a warning that there are mails on the way that pretend to be an invitation to BlueSky, but are ultimately intended to be used to spread malware (Trojans) or for phishing. If you need a BlueSky Invite, you can get it here on borncity.com for free and without risk. I currently have free codes available again.
[German]Interesting story: I have noticed a post on BlueSky that mentions a special goody for cybersecurity victims. After an attack, when a victim received the decryptor and the key to decrypt his files, he asked if he could have a "security report" that would reveal how the IT network had been penetrated. And the victim did indeed receive some clues.
[German]I'm picking up on an (actually old) topic here in the blog, which is becoming virulent again with the new Outlook app introduced by Microsoft. The new Outlook app transfers all (actually secret) access data for mail accounts to Microsoft in the cloud. The topic has already been raised as a question by readers and has now become "virulent" thanks to an article by our colleagues at German site heise.
[German]The US platform Dolly.com has fallen victim to a ransomware attack. The company paid to avoid publishing data. However, the cyber criminals were not satisfied and published the captured data anyway, as research shows.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]With the October 2023 updates, Windows Server 2012 and Windows Server 2012 R2 have reached their end of support; there will be no more security updates in the future. Unless you book an Extended Security Update Extension (ESU license). Recently, there was still confusion because this ESU license was not to be provided for on-premises systems. Microsoft has now published or updated some details about the ESU program for Windows Server 2012/R2.
[German]The October 2023 updates for Windows Server 2022 (KB5031364) are probably causing issues with VMware ESXi. Virtual machines (VMs) running on VMware ESXi hosts may not be able to start Windows 2022 (as a guest). Affected VMs trigger a blue screen. Microsoft has now acknowledged these problems for KB5031364 in the list of known issues for Windows Server 2022 and proposes a temporary fix. Continue reading
[German]On November 9, 2023, Microsoft released both an update of the Chrome browser in the Extended Stable to 118.0.2088.102 and an update to Edge 119.0.2151.58. Thanks to the reader for the tip. Here is some information about the update.
[German]With the update to WordPress 6.4 on November 7, 2023, the display of (some) responsive themes on mobile devices was broken. This also affected my blogs. In my estimation, a bug fix will only come with WordPress 6.4.3. However, there is now a quick fix in the form of a plugin, which I have included in the blog. I'll quickly document the problem and the fix below – perhaps it will help others.
[German]Another short story for the weekend that is currently making the rounds in the US media. Microsoft apparently annoyed Windows users by asking them why they wanted to quit OneDrive. Microsoft says it was just a test and has now removed this query. But it wasn't the "first test" with an annoying query.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
