[English]Microsoft plans soonto switch off the encryption methods TLS 1.0 and 1.1 still used by default in the Schannel protocol (starts in September 2023 with Windows 11 Insider Builds). Therefore, a quick note for administrators in enterprise environments: It might be helpful to enable Schannel event logging for monitoring. If not known, Microsoft has published a separate support post on this topic.
[German]Microsoft surprisingly fixed a vulnerability in the Azure environment as reported of Aufugst 4, 2023, with a patch originally scheduled for end of September 2023. Microsoft has been aware of the vulnerability since March 2023. The harsh criticism of the security culture at Microsoft by Tenable CEO Amit Yoran and the public response probably caused Microsoft to move. Addendum: But there are side effects from this patch.
[German]Reminder to Microsoft Office 2016 and 2019 users and administrators, if this isn't on your radar, as of October 2023, support for connections from Office apps to Microsoft 365 services will end. Connections will still be able to be made, but there will no longer be support for issues. The information is not new, I had already pointed it out in 2022. Recently, however, the information has come under my eyes again.
[German] Tip for people who like to tinker with PowerShell and scripts on Windows. There is a project that collects PowerShell scripts for various purposes and makes them available for general use. By now there are more than 500 PS scripts there. Continue reading
[German]Anyone using the Papercut MF/NG print management solution under Windows should urgently patch the product. A critical RCE vulnerability CVE-2023-39143 that has just been disclosed allows PaperCut servers to be taken over. The vendor has already released a corresponding security patch to eliminate the vulnerability.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]I would like to ask the administrators among the readership if anyone else is experiencing the effect mentioned here. An administrator contacted me because he has been getting reports of supposedly corrupt notifications from Teams for days. In use is Exchange Online and also the ZAP feature of Defender from Microsoft Office 365.
[German]If anyone is wondering why malware is repeatedly found in Android apps that are quite officially available in the Google Play Store, there is an explanation. Google's security team has now confirmed that attackers are using dynamic code loading to bypass malware detection in the Play Store.
[German]Broken Windows installations can be repaired by "installing over" the operating system (known as "Inplace Upgrade"). Now there are reports that Microsoft is internally working on a feature that will enable such a repair by an "Inplace Upgrade" via Windows Update. At least in Windows 11 Insider Preview, this previously hidden function can be tested. Overall, however, the whole thing sheds light on Microsoft's quality and development status – Windows 11 is so broken that it needs an integrated function to make the system usable again via reinstallation.
[German]Microsoft has just issued a warning to Teams users because they have encountered phishing campaigns targeting this clientele. Behind these phishing campaigns are Russian attackers that Microsoft names Midnight Blizzard (or NOBELIUM. APT29, UNC2452 and Cozy Bear). The group's goal is to obtain credentials from victims, specifically in the government, non-governmental organization (NGO), IT services, technology, discrete manufacturing, and media sectors.
[German]The days the Mozilla developers had released the versions 116.0.0 of the Firefox browser. Now version 116.0.1 has already been added. The release notes says that a bug has been fixed: Fixed an issue which caused chart elements to render incorrectly for Windows users.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
