[German]Microsoft has released the optional cumulative (preview) update KB5029351 for Windows 11 version 22H2 as of August 22, 2023. This brings a number of fixes (similar to the preview update for Windows 11 21H2). Below I give an overview regarding these updates for Windows 11.
[German]Microsoft has updated the Edge browser to version 116.0.1938.54 as of August 21, 2023. It is a new development branch that also brings new features and fixes vulnerabilities. In the meantime, however, I have a reader's report about problems with group policies. These are ignored when logging into the Microsoft account.
[German]I don't know if administrators of Ivanti Mobileron solutions can still hear it: The vendor is currently warning about a new 0-day vulnerability CVE-2023-38035 in Ivanti Sentry (formerly MobileIron Sentry). Versions 9.18, 9.17 and 9.16 are affected. Older editions are also at risk, but are no longer supported.
[German]Extensions for Google Chrome such as adblockers, price tracking extensions or spell checkers are convenient and quick to install. However, for security reasons, you should keep your hands off them, as the extensions can compromise online security. Google's developers have reacted and want to warn against harmful extensions were (if they are known).
[German]Are there sudden login problems or errors when logging out of a session under Citrix VDI? If FSLogix is used and it uses cloud cache locations for profiles or ODFC containers along with App Layering Elastic Layers, this may be the cause.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Small addendum to the vulnerability CVE-2023-32019 in the Windows kernel. Microsoft had patched the relevant vulnerability on patchday (June 13, 2023), but had not armed it. The vulnerability CVE-2023-32019 can be used to obtain information. To enable the fix against the vulnerability, administrators could previously set a registry entry under Windows. Now Microsoft has automatically armed this protection against the vulnerability for all users with the security updates of August 8, 2023.
[German]I don't know how common WinRAR is among the blog readers. WiNRAR developers have fixed a critical code execution vulnerability (CVE-2023-40477) in the software. It is enough to open a compromised archive file to allow attackers to execute arbitrary code on the victim's target system. Therefore, those who use WinRAR should install the latest version 6.23. Addendum: It was suspected, that software products that contain the WinRAR libraries are also affected. But that seems not be true.
[German]There has been a data leak at NXP Semiconductors, a manufacturer of electronic semiconductor components. The Dutch company is the 2006 spin-off of the semiconductor division of Royal Philips. Following the acquisition of Freescale, NXP is Europe's largest semiconductor manufacturer with sales of almost 9 billion euros.
[German]Security researchers from Aqua Security came across several vulnerabilities in Microsoft's PowerShell gallery some time ago. The vulnerabilities were then reported to Redmond, where unsuccessful attempts were made to fix the bugs with patches. Now the security researchers have gone public with a report about this a few days ago to warn about these vulnerabilities.
[German]On August 5, 2023, I received an e-mail from Microsoft informing me about changes to the service contract. It says that the service contract has been made "clearer now". If you take a look at the details, you will see that a new AI services category has been added.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
