[German]This week Microsoft has released preview updates for Windows 10 22H2 as well as Windows 11 21H2 – 22H2. Now the company reports that these updates may cause problems with applications. Some applications may not be able to play, record or capture video. Applications and cameras that use the WVC1 codec may not work as expected.
Security researchers say they have discovered the first attack on the open source software supply chain specifically targeting the banking sector. That's according to a report published by Checkmarx on July 21, 2023. On April 5 and 7, a threat actor used the NPM platform to upload some packages that contained a pre-installed script. When it was installed, the malicious code was executed, attempting to carry out a supply chain attack against banks. Details in the above report and in The Hacker News article.
[German]There appear to be significant issues with the security update released for Windows 11 22H2 on July 11, 2023. Registering in Azure Actice Directory (AAD, now EntraID) no longer seems possible in the browser. A blog reader pointed out the issue to me (thanks for that) There is a lengthy discussion at Microsoft in support including suggestions for workarounds.
[German]Microsoft has published a new support article the other day that addresses the "slow save" issue with Outlook Desktop. The problem occurs when attachments are to be saved to a location within a network. Then a corresponding dialog box appears. Microsoft suggests a temporary workaround for this problem.
Small addendum from this week, already on July 24, 2023 Apple has released a slew of updates for the Safari browser, for iOS on iPhones and iPadOS for the iPads. In addition, there are updates for macOS, Apple TV and the Apple Watch. Details can be found on this Apple website. According to The Hackers News, critical vulnerabilities (CVE-2023-38606) are included, which are actively exploited.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Vendor Sophos has released an update to UTM Up2date 9.716 for its UTM firewall, which is intended to fix a number of vulnerabilities CVE-2023-0286, CVE-2023-0215, CVE-2002-20001, CVE-2022-40735, CVE-2002-20001, CVE-2022-40735, CVE-2023-3367, CVE-2002-20001, CVE-2022-40735 as well as various bugs. The vulnerabilities affect OpenSSL as well as the web admin interface and the web server.
[German]Now it's official what has been whispered behind closed doors by insiders for weeks. The European Commission has launched a formal investigation into whether Microsoft may have violated EU competition rules. At issue is Microsoft's communications and collaboration product Teams and its tying or bundling with the popular Office 365 and Microsoft 365 enterprise suites.
Mozilla developers have released versions 115.0.3 of the Firefox browser as a bug fix update. The release notes of Firefox 115.0.3 from July 27, 2023 only contain the note: Improved migration experience for users switching to the ESR release.
In case you haven't noticed, MikroTik RouterOS Stable before version 6.49.7 and in the long-term version up to 6.48.6 contains a vulnerability CVE-2023-30799 that allows an attacker to escalate privileges, but the attacker must be authenticated. However, he can then remotely escalate privileges from admin to super-admin on the Winbox or HTTP interface. This then allows him to execute arbitrary code on the system. Details can be found on GitHub; MikroTik posted this warning. This issue is fixed in all RouterOS versions available on the MikroTik download page (v7.7 and v6.49.7 and newer). According to the colleagues at Bleeping Computer, 900,000 devices are potentially vulnerable to this vulnerability.
[German]Microsoft has started to disable the possibility to import updates manually in WSUS (Windows Server Update Service). The background is that the ActiveX components in question are outdated and Internet Explorer is being replaced by Edge. Yesterday, there was already a discussion here on the blog that the manual import in Edge no longer works. Microsoft has documented the whole thing in a tech community post and provides a PowerShell script to import updates in WSUS.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
