[German]A brief update from this week: On September 17, 2025, details of the CVE-2025-55241 vulnerability in Microsoft Entra ID were made public. This vulnerability would have allowed any attacker to obtain tokens enabling them to assume the global administrator role for any tenant.
[German]To end this week, here is a summary of the two browsers Chrome and Edge. Both browsers have critical security vulnerabilities that are being exploited. Browser updates are recommended. Google is also enhancing its Chrome browser (outside the EU) with AI. Edge is set to receive the Adobe PDF Reader in the near future.
[German]Quick note for users of Windows 10 22H2, Microsoft Office 2016, and Microsoft Office 2019. Microsoft recently reminded users that support for these products will end on October 14, 2025. On this date, security updates for Windows 10 and the aforementioned Office versions will be discontinued.
[German]The provider WatchGuard is active in network security and offers a Firebox appliance in this area. In a recent security alert dated September 17, 2025, the provider points out a critical vulnerability CVE-2025-9242 in its Firebox appliance that allows an attacker to execute code.
[German]Brief note to readers who use SonicWall and have not yet received this information today. There was an incident in which backup files of the firewall configuration stored in certain MySonicWall accounts were exposed in the cloud. This allowed attackers to read the configuration information.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]With the security updates for Windows 10 and Windows 11 released on September 9, 2025, a problem with accessing SMBv1 network shares has crept in. There are reader comments about this here in the blog. Now there are indications that Microsoft has confirmed the problem, at least internally.
[German]Microsoft has also marked a known bug that caused Dirac Audio issues in Windows 11 24H2 as fixed as of September 12, 2025. The support article from December 2024 describing the issue of Dirac Audio losing audio output when using cridspapo.dll has been updated. And the upgrade stop for Windows 11 24H2 has been lifted.
[German]I'll bring up another rather crude observation: In the spring of 2025, an administrator reported that contacts and later emails were mysteriously deleted from some of his users' Microsoft 365 accounts, initially sporadically. Now I've come across a similar case on the Microsoft forum.
[German]It's a crude situation that I still can't quite wrap my head around. I got reports form users, that for several weeks now, third parties have been accessing Microsoft accounts, as can be seen in their activity history. The users had activated two-factor authentication for their accounts. How can this be? And even more bizarre: readers whom I asked to check their account activity history found nothing there (the same is the case for me and my Microsoft test accounts).
[English]Time for some news on VMware by Broadcom and a look at the VMware paradox. According to an analysis, VMware will lose 35% of its workload in three years as customers jump ship. British supermarket giant Tesco is suing VMware, which is generating negative publicity. And yet VMware by Broadcom is still raking in huge profits.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
