[German]Brief information for Thunderbird users, who observe the mail client suddenly can't sync mails from Microsoft accounts (hotmail.com or outlook.com etc.). A manual intervention is necessary, where JavaScript has to be activated and then the authentication of the Microsoft accounts has to be included again.
[German]Google has released updates to Google Chrome Browser 116 in the Stable and Extended channels for Mac, Linux, and Windows as of September 11, 2023. These are security updates that are being rolled out and are intended to address a vulnerability (classified as "critical"). Continue reading
[German]Users of Windows 11 may run into the problem that the monthly updates or preview updates fail during installation since the end of June 2023. A too small WinRE partition on the system drive can be to blame for this. Microsoft has now revealed some details in a support article and explained how this WinRE partition could be enlarged.
[German]Brief notice for users of the Thunderbird email client who are still on the 102 development branch. The Mozilla team has just released the update from version 102.15.0 to version 115.2.0 of the current development branch. You can have Thunderbird updated – but this may bring some (unpleasant) surprises.
[German]Singapore-based security vendor Group-IB released a security report that points to specific activity by a group of cybercriminals called W3LL. The cybergang has developed a phishing kit to hijack Microsoft 365 accounts and offers this service to at least 500 other cybergangs through a secret W3LL store. Until now, the provider has been "operating under the radar" of security agencies because customers could only access the offerings by referral. The W3LL phishing tools were used to attack more than 56,000 Microsoft 365 accounts belonging to companies in the U.S., Australia and Europe between October 2022 and July 2023.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Brief information for people who use Windows and were used to the fact that printer drivers from the manufacturers were also updated by Microsoft via Windows Update. In the future, Microsoft will increasingly rely on the Mopria standard for printers/scanners. Now Microsoft has announced that the distribution of older printer drivers via Windows Update is to be phased out. This will probably only take effect for new printer driver from 2025 and probably only for Windows 11 and successors, since Windows 10 will reacht end of support in October 2025.
Apple has released another slew of security updates for its macOS, iOS/iPadOS and also WatchOS operating systems as of September 7, 2023. These updates fix two 0-day vulnerabilities that were abused by NSO Group's Pegasus spyware to monitor mobile devices.
[German]In mid-August 2023, security researcher Jaroslav Lobacevski had made public four vulnerabilities (CVE-2023-40031, CVE-2023-40036, CVE-2023-40164, CVE-2023-40166) in Notepad ++ editor for Windows. The vulnerabilities' rating ranges from medium to high. The developer, having known about these vulnerabilities for months, has now fixed them with the update to Notepad++ v8.5.7.
[German]Microsoft has updated the Edge browser in stable channel to version 116.0.1938.76 as of Sept. 7, 2023. The release notes says "Fixed various bugs and performance issues for Stable release". The security release notes state that the update includes the latest Chromium browser security fixes in addition to bug fixes and stability improvements (thanks to EP for pointing this out).
[German]The hack of Microsoft's Azure cloud by the suspected Chinese group Storm-0558 from May to June 2023 was possible due to a stolen private MSA key and bugs. At the time, accounts at Exchange Online via OWA and Outlook.com had been hacked from 25 organizations. It was unclear how the attackers came into possession of a private MSA key. Now Microsoft has announced that the MSA key came from a so-called Windows crash dump, which was created on a Microsoft PC and then dumped via a compromised system.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
