Microsoft's Storm-0558 cloud hack: US senator among the victims

Posted on 2023-08-16 by guenni

[German]It's been a few days since it became known that members of the suspected Chinese cyber group Storm-0558 managed to break into the Exchange Online and private outlook.com accounts of 25 organizations. Now a US senator came forward with the information that he had just been informed by the FBI that his personal email account was affected by this hack. And while we're on the subject, I'll put a second piece of information in this post. Administrators who are responsible for looking after the Microsoft Cloud in companies need to check whether tenants were affected by this hack. If necessary, a data protection incident report must then be submitted to the relevant authorities.

Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment

Exchange Server August 2023 update: all patches pulled; workaround changed

Posted on 2023-08-15 by guenni

Exchange Logo[German]After the August 2023 security update for Exchange 2016 and 2019 caused massive installations issues for non-English installations, Microsoft had pulled finally all updates. In addition, Microsoft has made a change to the workaround proposed to overcome the install issues.; the newly created AD account may no longer be deleted. Another blog reader informed me about a bug that occurs after the update. Addendum: New versions of the updates has been re-released as of August 15, 2023.

Continue reading →

Posted in issue, Update | Tagged , , | Leave a comment

Windows 10: Updates KB5028244 and KB5029244 causes ClickOnce install issues with apps

Posted on 2023-08-15 by guenni

Windows[German]Microsoft has confirmed a bug that was already distributed with the July 2023 preview update KB5028244 on Windows 10 22H2 and is also included in successor updates. Applications installed via ClickOnce prompts the user to reinstall them every time they are launched. Currently, Microsoft only provides a solution in the form of a Known Issues Rollback – or as a workaround, the request to uninstall and then reinstall the app.

Continue reading →

Posted in issue, Update, Windows | Tagged , , | 2 Comments

Reminder: Remote PowerShell on Exchange Online will be disabled

Posted on 2023-08-15 by guenni

Exchange Logo[German]Small reminder for administrators who maintain Microsoft's Exchange Online and still work with Remote PowerShell (RPS). In the meantime, Microsoft has deactivated RPS for new instances and this function can no longer be activated. In a few weeks, support for Remote PowerShell (RPS) will also end for existing installations. So if you haven't reacted yet, you have to switch to the successor solution as soon as possible.

Continue reading →

Posted in Cloud | Tagged , | Leave a comment

Outlook "open window" bug at startup a permission issue?

Posted on 2023-08-14 by guenni

[German]Since the Office updates of late June 2023, users have been complaining that every time they start Outlook, it asks if they want to reopen windows open in the previous session (which do not exist). I have information that this may be a permission issue.

Continue reading →

Posted in issue, Office | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

PingCastle 3.1: Active Directory and AzureAD Security Health Check

Posted on 2023-08-13 by guenni

WindowsBrief note for people who are concerned with the topic of security under Active Directory and AzureAD (today called EntraID). Vincent Le Toux has released his PingCastle version 3.1 at the beginning of August 2023. PingCastle can be used to perform a security audit in Active Directory & AzureAD within seconds. The project is available in C# source code and can be used partially free of charge under certain licenses.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Updates: Internet Explorer; .NET framework with installation issues (Aug. 8, 2023)

Posted on 2023-08-12 by guenni

Update[German]As of August 8, 2023, Microsoft has patched other software in addition to security updates for Windows and Office. There is a security update for Internet Explorer for various Windows Server versions. And there are also security updates for the .NET Framework for various versions. However, these .NET updates cause installation problems under Windows 11. Below is an addendum to these updates as a collective post.

Continue reading →

Posted in issue, Security, Software, Update | Tagged , , , , | Leave a comment

Office 365: Sign in Error 1001

Posted on 2023-08-11 by guenni

[German]There are reports that users of the Office 365 suite are suddenly getting error 1001 when trying to log in. An IT service provider contacted me about this because this was occurring with their customers. However, there is a workaround on how to fix this.

Continue reading →

Posted in issue, Office | Tagged , | 6 Comments

Workaround for Exchange August 2023 security update install issue

Posted on 2023-08-10 by guenni

Exchange Logo[German]Addendum from the August 2023 patchday, which caused issues for administrators of Microsoft Exchange 2016/2019. On non-English systems the installation failed and the Exchange server was partially dead afterwards. I had warned here my German users in my articles and Microsoft withdrew the security updates August 2023 for Exchange. Now Microsoft has published a support article with a workaround for these problems.

Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Microsoft's Office Defense in Depth Update ADV230003 (August 2023) breaks RCE Attacks via CVE-2023-36884

Posted on 2023-08-10 by guenni

[German]Microsoft has released security updates for Windows and Office as of August 8, 2023. For Microsoft Office, there were security updates for the MSI versions for both version 2013 and Office 2016. The C2R variants of Office 2016 and 2019 should also have received their corresponding update. Microsoft is calling these updates "Defense in Depth Updates", which is intended to break an attack chain in Windows Search. Here is some more information about it.

Continue reading →

Posted in Office, Security, Update | Tagged , , , | Leave a comment