[German]On July 24, 2023, there was a brief outage of SharePoint Online and OneDrive for Business. After two hours, Microsoft informed us that the problem was related to an update and had already been corrected. In the meantime, it has been determined that an incorrect TLS certificate that was distributed was the cause.
[German]Since installing the July 11, 2023 security updates that closed a Security Feature Bypass vulnerability in Outlook, some users can no longer use hyperlinks without restrictions. Either a warning comes up or the hyperlinks no longer work. Now Microsoft has spoken out and has also suggested a workaround.
[German]Another small addendum in terms of security. At the end of June 2023, security researchers from Cyble issued a warning about a Super Mario Game installer. Security researchers have come across a corresponding installer that contains a Trojan and spreads the SupremeBot malware.
[German]Microsoft has updated the Edge browser to version 1114.0.1823.90 as of July 21, 2023, as well as released version 115.0.1901.183 (thanks to the reader for the tip). They are security updates that fix bugs and vulnerabilities.
[German]One more quick piece of information for administrators who manage Windows Server 2022 Datacenter virtual machines on Microsoft Azure with Desktop Experience. Microsoft has just announced that hotpatching is now available for these machines.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft had to admit on begin of July 2023 that suspected Chinese hackers from the Storm-0558 group were able to forge security tokens using a stolen private MSA key. Then then gain broad access to Microsoft cloud services, as Wiz now revealed. So it's not just about the ability to access accounts at Exchange Online and Outlook.com, which Microsoft had admitted recently.
[German]Another "shortie for the weekend", since I haven't considered this topic yet. Microsoft provides a set of group policies (GPOs) for managing/controlling updates in Windows. The whole thing is documented on the Policy CSP for Updates page. I had already provided a reference to the site in the post Windows Update CSP page refreshed (Jan. 2023). Currently, however, there seem to be problems with the content of the page, so the information provided there is not correct.
[German]The developers of Thunderbird have already released another update of the email client to version 115.0.1 on July 20, 2023. It is a bug fix update, which should eliminate errors and a vulnerability.
[German]Besides the issue, that Outlook constantly asking to open previous session windows on startup (see Outlook startup asks for "re-open windows", options to disable missing), there may be another bug that has made its way into the Click-2-Run versions of Office 365 via update. A blog reader informed me that in his environment new Outlook appointments automatically become Teams meetings. Addendum: There is now a fix and a workaround.
[German]The U.S. cybersecurity agency CISA is warning administrators of Citrix NetScaler ADC installations. Threat actors have begun exploiting the NetScaler ADC vulnerability CVE-2023-3519, disclosed a few days ago, to implant webshells. Administrators should look for signs of compromise. Kompromittierung suchen.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
