[German]On August 1, 2023, Mozilla developers released the new Firefox 116, as well as the Firefox 115.1 and Firefox 102.14 ESR maintenance updates. The updates closed some vulnerabilities that were rated as High. Here is a brief overview of the updates in question, including the fixes and the new features.
[English]Security researchers warn that attackers are exploiting the Citrix ShareFile RCE vulnerability CVE-2023-24489 in the wild right now. Citrix ShareFile is a widely used cloud-based file sharing application that is affected by critical remote code execution (RCE) CVE-2023-24489 (CVSS score 9.1). If anyone is using Citrix ShareFile, the vulnerability should be closed urgently.
[German]Since February 2022 there was the problem that in Windows Server Update Service (WSUS) updates could not be distributed to clients running Windows 11 22H2 as well as Windows Server 2022. I had even published a corresponding post on the topic in the blog. Now Microsoft has fixed the bug in this area that prevented deploying updates to Windows 11 22H2 as well as Windows Server 2022 in WSUS since February 2022.
[English]Microsoft plans to gradually migrate first users of Windows apps Mail and Calandard to the new Outlook app starting in late August 2023. I'm not sure how excited users are about this.
[German]Small addendum from Friday, since this was already off my radar (came across it via Susan Bradley). Instead of the 1st Tuesday in July (A-Week), Microsoft released non-security updates for still-supported versions of Microsoft Office on July 27, 2023. There were Several updates for Office 2016 (Office 2013 went out of support in April 2023 and no longer receives non-security updates). Here is a brief overview of the updates.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Nice side story: a hacker who operated in Russian-language forums since 2020 mistakenly infected his computer with malware he used, selling information to security researchers at Hudson Rock. So Hudson Rock staff was able to identify the hacker called La_Citrix and hand the data to law enforcement.
[German]Today a little hint for people who are still using Windows 7 SP1 or Windows Server 2008 / R2. The Chrome browser (and Edge) are no longer supported there in the new builds, but remain stuck on version 109 of the Chromium browser. But Bolko had some time ago pointed to the Supermium project, a Chrome clone, which is pulled along with current Chromium builds and also still runs under Windows 7 (arrow fast).
[German]This week Microsoft has released preview updates for Windows 10 22H2 as well as Windows 11 21H2 – 22H2. Now the company reports that these updates may cause problems with applications. Some applications may not be able to play, record or capture video. Applications and cameras that use the WVC1 codec may not work as expected.
Security researchers say they have discovered the first attack on the open source software supply chain specifically targeting the banking sector. That's according to a report published by Checkmarx on July 21, 2023. On April 5 and 7, a threat actor used the NPM platform to upload some packages that contained a pre-installed script. When it was installed, the malicious code was executed, attempting to carry out a supply chain attack against banks. Details in the above report and in The Hacker News article.
[German]There appear to be significant issues with the security update released for Windows 11 22H2 on July 11, 2023. Registering in Azure Actice Directory (AAD, now EntraID) no longer seems possible in the browser. A blog reader pointed out the issue to me (thanks for that) There is a lengthy discussion at Microsoft in support including suggestions for workarounds.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
