Windows: Microsoft reminds of coming TLS 1.0/1.1 deactivation

Posted on 2023-09-04 by guenni

Windows[German]It's a topic that has been addressed several times here on the blog: The days of using the TLS 1.0 and TLS 1.1 protocols to communicate with servers are coming to an end. The protocols are no longer considered secure and should no longer be used. Microsoft has again taken the opportunity on September 1, 2023 to inform administrators that the two protocols will be disabled "in the near future" under Windows "in upcoming operating system versions".

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Vulnerabilities (CVE-2023-40481, CVE-2023-31102) in 7-ZIP; fixed in version 23.00 (August 2023)

Posted on 2023-09-03 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A short update from the end of August 2023. Security researchers have found two vulnerabilities in the 7-Zip program, which is used to pack and unpack ZIP archive files. The vulnerabilities CVE-2023-40481 and CVE-2023-31102 are classified as high-risk from a security perspective. Attackers could possibly elevate privileges.

Continue reading →

Posted in Security, Software, Update | Tagged , , | Leave a comment

Decryptor for Key Group Ransomware Available

Posted on 2023-09-03 by guenni

Sicherheit (Pexels, allgemeine Nutzung)Security researchers at ElectricIQ have discovered a vulnerability in the routines of the Key Group ransomware that allowed decryption tools to recover encrypted files. The decryption tool only works on a specific version of the ransomware developed around Aug. 3, the vendor said. The Python script can be found at the end of this article, which also includes some details about the ransomware. The Register published this article on the subject in late August 2023.

Posted in Security | Tagged | Leave a comment

Firmware updates for Surface Laptop 4 and Surface Duo

Posted on 2023-09-03 by guenni

Microsoft has released a firmware update for its Surface Laptop 4 on August 31, 2023, which is supposed to fix security issues and a charging problem. In addition, there is probably the (presumably) last firmware update for the Surface Duo smartphone.

Continue reading →

Posted in devices, Update | Tagged , , | Leave a comment

MalDoc: Malicious Word files in PDF documents bypass malware detection

Posted on 2023-09-03 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Another small addendum from this week: The Japanese CERT warns of a new technique used by cyber attackers who take malicious Word files and embed them in PDF documents. This "packaging" is intended to bypass the detection of the malicious Office documents by security software. JPCERT/CC first observed such attack techniques, known as MalDoc, via infected PDF files in July 2023.

Continue reading →

Posted in Office, Security, Software | Tagged , , | 1 Comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Deprecated Windows features: WordPad to disappear from Windows after 28 years

Posted on 2023-09-02 by guenni

Windows[German]On September 1, 2023, Microsoft once again announced which functions they want to part with in future Windows versions. In the new list, some functions are marked as 'deprecated'. So the security protocols for connections, TLS 1.0 and 1.1, are to die now finally. But also WordPad, which has been delivered with Windows for 28 years and is hardly used, is going to the old age and will disappear in the future.

Continue reading →

Posted in Software, Windows | Tagged , | Leave a comment

Vulnerabilities in Notepad ++ (Sept. 2023)

Posted on 2023-09-02 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Several vulnerabilities (CVE-2023-40031, CVE-2023-40036, CVE-2023-40164, CVE-2023-40166) are believed to exist in the popular Notepad ++ editor and have been reported to the developer by a security researcher. The vulnerability ratings range from medium to high. Although this report was made several months ago, there is no security update for Notepad ++ yet, although several product updates have been made in the meantime. When an update will be available is currently open.

Continue reading →

Posted in Security, Software, Windows | Tagged , | Leave a comment

Exchange 2016/2019 get HSTS support; Extended Protection will also be enabled soon

Posted on 2023-09-01 by guenni

Exchange Logo[German]With CU14, Microsoft pans to enable the Windows Server Extended Protection feature by default for Exchange Server 2019 for improved protection. However, it will be possible to deactivate this feature when installing the CU14 if required. Redmond has announced this as of August 28, 2023. Furthermore, there is the announcement that Exchange 2016/2019 will finally get support for HTTP Strict Transport Security (HSTS). Microsoft has also just announced this in a tech community post.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

PowerToys 0.73.0 released

Posted on 2023-09-01 by guenni

Windows[German]Microsoft has released version 0.73.0 of its free PowerToys for Windows 10 and Windows 11 on August 31, 2023. In this version, the developer says it has focused on new features, stability and improvements. Here is an overview of the current status. Continue reading →

Posted in Software, Windows | Tagged | Leave a comment

Edge 116.0.1938.69

Posted on 2023-09-01 by guenni

Edge[German]Microsoft has updated the Edge browser to versions 116.0.1938.69 as of August 31, 2023. The security release notes for Edge 116.0.1938.69 state that the update includes the latest Chromium browser security fixes (CVE-2023-4572) in addition to bug fixes and stability improvements (thanks to EP for pointing this out).

Posted in browser, Security | Tagged | 1 Comment