Microsoft July 2023 Patchday issues (Windows, Office, Apps) – Part I

Posted on 2023-07-20 by guenni

Update[German]On Patchday, July 11, 2023, Microsoft released a bunch of security updates for Windows, Office and other products. In addition, a vulnerability in the HTML component of IE became known, which could allow an RCE attack on Office and Windows with system takeover. There is no patch for this, only countermeasures for protection. And some readers complain about issues after the update, among other things because Kerberos hardening measures take effect since July 2023 and can no longer be disabled. Here is part 1 of a follow-up on these issues.

Continue reading →

Posted in issue, Office, Software, Update, Windows | Tagged , , , , | Leave a comment

TP-LINK TL-WR840N: Vulnerability allows stack buffer overflow DOS

Posted on 2023-07-20 by guenni

Sicherheit (Pexels, allgemeine Nutzung)There is a vulnerability in the firmware of the TP-Link router TP-LINK TL-WR840N that allows a remote attacker to perform a stack buffer overflow DOS attack. TP-Link does not want to publish a security advisory for this, but has made a new firmware (TL-WR840N(KR)_V6.2_230702) available on this website. The team at ssd-disclosure.com has disclosed details about the vulnerability in this blog post.

Posted in devices, Security | Tagged , | Leave a comment

Windows 10 creates garbage files (.checkpoint files) in Windows/System32

Posted on 2023-07-20 by guenni

Windows[German]I'm posting a problem here in the blog that a reader reported by email. The Windows user regularly receives files with the file name extension .checkpoint and (presumably) a UUID code as the file name in the Windows System32 folder. This is a Windows 10 22H2 system and the files can also be deleted. Is there an explanation, what these files are meaning?

Continue reading →

Posted in issue, Update, Windows | Tagged , | Leave a comment

After CISA report on Storm-0558 hack, Microsoft provides customers with enhanced cloud logging

Posted on 2023-07-20 by guenni

[German]At the suggestion of the U.S. National Security Agency (CISA), Microsoft will provide its customers with enhanced cloud logging capabilities at no additional cost. This is intended to improve cyber defenses and incident response and is in response to the successful attack by Chinese hackers (Storm-0558) on Outlook Online accounts, which only attracted the attention of a U.S. agency because of such logging capabilities.

Continue reading →

Posted in Cloud, Security | Tagged , | Leave a comment

VirtualBox 7.0.10 and 6.1.46 released

Posted on 2023-07-19 by guenni

Virtualbox[German]As of July 18, 2023, the developers of Virtualbox have released both version7.0.10 and the update to version 6.1.46. Both versions are maintenance updates for bug fixes.

Continue reading →

Posted in Software, Update, Virtualization | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Outlook 2016: Links broken after update from July 11, 2023 (KB5002427) – Security warning appears when clicking links

Posted on 2023-07-19 by guenni

[German]The security update KB5002427 for Outlook 2016 from July 11, 2023 (as well as the Click-2-Run updates of Office from the same date) cause an unpleasant bug. If the user wants to open links in Outlook 2016, the program displays a security notice. The links simply no longer work. The solution I know so far is to uninstall update KB5002427 (or the latest Office 365 build).

Continue reading →

Posted in issue, Office, Security, Update | Tagged , , | 11 Comments

Google Chrome 115.0.5790.98/99 security updates

Posted on 2023-07-19 by guenni

Chrome[German]Google has released updates to the Google Chrome browser 115 in the stable channel for Mac, Linux and Windows on July 18, 2023. They are security updates that will be rolled out in the coming weeks and should fix 20 vulnerabilities.

Continue reading →

Posted in browser, Security, Software, Update | Tagged , , | Leave a comment

Critical RCE Vulnerability in Citrix NetScaler ADC and Citrix Gateway

Posted on 2023-07-19 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Brief warning to administrators of Citrix NetScaler ADC and Citrix Gateway. The vendor has issued a security advisory warning of a critical remote code execution vulnerability in the products. The vendor has released updates for the affected products, which administrators should apply immediately to the installations they support.

Continue reading →

Posted in Security, Software, Update | Tagged , , | Leave a comment

Firefox 115.0.3ESR released

Posted on 2023-07-19 by guenni

Mozilla[German]The days the Mozilla developers had released the versions 115.0 of the Firefox browser (see). Now the 115.0.3 ESR version of the browser has been released as of July 18, 2023 (thanks for pointing it out). The release notes of Firefox 115.0.3 ESR only contain the note: Fixed a startup crash for Windows users with Qihoo 360 Antivirus software installed (bug 1843977).

Posted in browser | Tagged | 1 Comment

Edge 114.0.1823.86

Posted on 2023-07-19 by guenni

Edge[German]Microsoft has updated the Edge browser to version 114.0.1823.86 as of July 17, 2023. The release notes state that various bugs and performance issues for Microsoft Edge have been fixed.

Continue reading →

Posted in browser, Software, Update | Tagged | Leave a comment