[German]Since installing the July 11, 2023 security updates that closed a Security Feature Bypass vulnerability in Outlook, some users can no longer use hyperlinks without restrictions. Either a warning comes up or the hyperlinks no longer work. Now Microsoft has spoken out and has also suggested a workaround.
[German]Another small addendum in terms of security. At the end of June 2023, security researchers from Cyble issued a warning about a Super Mario Game installer. Security researchers have come across a corresponding installer that contains a Trojan and spreads the SupremeBot malware.
[German]Microsoft has updated the Edge browser to version 1114.0.1823.90 as of July 21, 2023, as well as released version 115.0.1901.183 (thanks to the reader for the tip). They are security updates that fix bugs and vulnerabilities.
[German]One more quick piece of information for administrators who manage Windows Server 2022 Datacenter virtual machines on Microsoft Azure with Desktop Experience. Microsoft has just announced that hotpatching is now available for these machines.
[German]Microsoft had to admit on begin of July 2023 that suspected Chinese hackers from the Storm-0558 group were able to forge security tokens using a stolen private MSA key. Then then gain broad access to Microsoft cloud services, as Wiz now revealed. So it's not just about the ability to access accounts at Exchange Online and Outlook.com, which Microsoft had admitted recently.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Another "shortie for the weekend", since I haven't considered this topic yet. Microsoft provides a set of group policies (GPOs) for managing/controlling updates in Windows. The whole thing is documented on the Policy CSP for Updates page. I had already provided a reference to the site in the post Windows Update CSP page refreshed (Jan. 2023). Currently, however, there seem to be problems with the content of the page, so the information provided there is not correct.
[German]The developers of Thunderbird have already released another update of the email client to version 115.0.1 on July 20, 2023. It is a bug fix update, which should eliminate errors and a vulnerability.
[German]Besides the issue, that Outlook constantly asking to open previous session windows on startup (see Outlook startup asks for "re-open windows", options to disable missing), there may be another bug that has made its way into the Click-2-Run versions of Office 365 via update. A blog reader informed me that in his environment new Outlook appointments automatically become Teams meetings. Addendum: There is now a fix and a workaround.
[German]The U.S. cybersecurity agency CISA is warning administrators of Citrix NetScaler ADC installations. Threat actors have begun exploiting the NetScaler ADC vulnerability CVE-2023-3519, disclosed a few days ago, to implant webshells. Administrators should look for signs of compromise. Kompromittierung suchen.
[German]As part of this week's Inspire 2023 partner conference, Microsoft also unveiled two new data backup products. With Microsoft365Backup and Microsoft 365 Archive, administrators should be able to back up data from Microsoft products such as OneDrive, SharePoint or Exchange in the Microsoft Cloud.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
