[German]US provider Cisco warns in a message about a critical vulnerability in one of its phone adapters. This vulnerability allows an attacker to take control of the device. Unfortunately, affected users can only dispose of this phone adapter, since the manufacturer will no longer offer a security update. The reason is that the device has reached the end of its support period.
Microsoft updated the Edge browser to version 113.0.1774.35 (security and bug fixes) on May 5, 2023 in the stable channel. According to the release notes, it fixes vulnerabilities from the Chromium project as well as two specific Edge vulnerabilities, CVE-2023-29350 and CVE-2023-29354. On May 4, there had already been the Edge 112.0.1722.71 in the Extendes stable, which fixes the same vulnerabilities.
[German]A security topic that was not really on my radar: data theft through manipulation of the Domain Name System (DNS). The whole thing goes under the terms DNSteal and DNS Exfiltration. Roughly speaking, these are techniques that can be used to tunnel firewalls and exfiltrate (steal) data via redirected DSN servers.
[German]Users of Windows 10 – and especially Windows 11 – sometimes get the error message that the library ResampleDmo.dll was not found when starting applications. After I recently came across a report about Windows 11 and this problem, I did some research. The exact causes are unclear so far (there are many possibilities why the error occurs). But there are some approaches to fix the cause of the error.
[German]Security researchers from Israeli security vendor Ermetic have discovered three vulnerabilities in Microsoft's Azure API management. Two server-side request forgery (SSRF) vulnerabilities and an unrestricted file upload issue create risks for the Microsoft cloud environment. The vulnerabilities could be abused by malicious actors to gain access to sensitive information or backend services.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]As of April 2023, update KB5025239 for Windows 11 22H2 was released and fixes several vulnerabilities (including a remote code execution vulnerability CVE-2023-21554, see QueueJumper: Patch critical RCE vulnerability in MSMQ service). However, this update seems to cause issuesfor some users.
[German]It is an exotic bug that Microsoft has just confirmed for Windows 11 22H2. After installing the update KB5022913, there can be sporadic problems in the language recognition of the operating system. However, the whole thing only occurs when Chinese or Japanese language inputs are made. So it should only affect a few readers of this blog.
[German]Sounds bizarre, is bizarre and unfortunately true. When users have a certain song played, the Alam function of the Google Pixel Android smartphones fails. The background is that the assistant then responds to the lyrics of the song "Where is my Mind" by the band Pixies. This contains a well-understood word STOP at the very beginning. Meanwhile, the band means "sorry" – and I mean, who does that?
[German]Microsoft has released the 2023 H1 Cumulative Update for Exchange Server 2019, effective May 3. Also sailing under the acronym CU13, the update brings Modern Auth to Exchange 2019 and Outlook on Windows and is said to fix nearly 200 bugs. Microsoft says the setup preserves the administrator's custom configuration settings.
[German]Microsoft provides information about known bugs and issues in Windows 10, 11 and Windows Server 2022 in the Known Issues category of its Windows Release Health status page. However, administrators from companies often do not have the time to check the pages to see if there are any new reports. Now Microsoft is offering the option for administrators from corporate environments to sign up for an email notification via their Microsoft 365 Admin Center.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
