Nice side story: a hacker who operated in Russian-language forums since 2020 mistakenly infected his computer with malware he used, selling information to security researchers at Hudson Rock. So Hudson Rock staff was able to identify the hacker called La_Citrix and hand the data to law enforcement.
[German]Today a little hint for people who are still using Windows 7 SP1 or Windows Server 2008 / R2. The Chrome browser (and Edge) are no longer supported there in the new builds, but remain stuck on version 109 of the Chromium browser. But Bolko had some time ago pointed to the Supermium project, a Chrome clone, which is pulled along with current Chromium builds and also still runs under Windows 7 (arrow fast).
[German]This week Microsoft has released preview updates for Windows 10 22H2 as well as Windows 11 21H2 – 22H2. Now the company reports that these updates may cause problems with applications. Some applications may not be able to play, record or capture video. Applications and cameras that use the WVC1 codec may not work as expected.
Security researchers say they have discovered the first attack on the open source software supply chain specifically targeting the banking sector. That's according to a report published by Checkmarx on July 21, 2023. On April 5 and 7, a threat actor used the NPM platform to upload some packages that contained a pre-installed script. When it was installed, the malicious code was executed, attempting to carry out a supply chain attack against banks. Details in the above report and in The Hacker News article.
[German]There appear to be significant issues with the security update released for Windows 11 22H2 on July 11, 2023. Registering in Azure Actice Directory (AAD, now EntraID) no longer seems possible in the browser. A blog reader pointed out the issue to me (thanks for that) There is a lengthy discussion at Microsoft in support including suggestions for workarounds.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has published a new support article the other day that addresses the "slow save" issue with Outlook Desktop. The problem occurs when attachments are to be saved to a location within a network. Then a corresponding dialog box appears. Microsoft suggests a temporary workaround for this problem.
Small addendum from this week, already on July 24, 2023 Apple has released a slew of updates for the Safari browser, for iOS on iPhones and iPadOS for the iPads. In addition, there are updates for macOS, Apple TV and the Apple Watch. Details can be found on this Apple website. According to The Hackers News, critical vulnerabilities (CVE-2023-38606) are included, which are actively exploited.
Vendor Sophos has released an update to UTM Up2date 9.716 for its UTM firewall, which is intended to fix a number of vulnerabilities CVE-2023-0286, CVE-2023-0215, CVE-2002-20001, CVE-2022-40735, CVE-2002-20001, CVE-2022-40735, CVE-2023-3367, CVE-2002-20001, CVE-2022-40735 as well as various bugs. The vulnerabilities affect OpenSSL as well as the web admin interface and the web server.
[German]Now it's official what has been whispered behind closed doors by insiders for weeks. The European Commission has launched a formal investigation into whether Microsoft may have violated EU competition rules. At issue is Microsoft's communications and collaboration product Teams and its tying or bundling with the popular Office 365 and Microsoft 365 enterprise suites.
Mozilla developers have released versions 115.0.3 of the Firefox browser as a bug fix update. The release notes of Firefox 115.0.3 from July 27, 2023 only contain the note: Improved migration experience for users switching to the ESR release.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
