[German]A security topic that was not really on my radar: data theft through manipulation of the Domain Name System (DNS). The whole thing goes under the terms DNSteal and DNS Exfiltration. Roughly speaking, these are techniques that can be used to tunnel firewalls and exfiltrate (steal) data via redirected DSN servers.
[German]Users of Windows 10 – and especially Windows 11 – sometimes get the error message that the library ResampleDmo.dll was not found when starting applications. After I recently came across a report about Windows 11 and this problem, I did some research. The exact causes are unclear so far (there are many possibilities why the error occurs). But there are some approaches to fix the cause of the error.
[German]Security researchers from Israeli security vendor Ermetic have discovered three vulnerabilities in Microsoft's Azure API management. Two server-side request forgery (SSRF) vulnerabilities and an unrestricted file upload issue create risks for the Microsoft cloud environment. The vulnerabilities could be abused by malicious actors to gain access to sensitive information or backend services.
[German]As of April 2023, update KB5025239 for Windows 11 22H2 was released and fixes several vulnerabilities (including a remote code execution vulnerability CVE-2023-21554, see QueueJumper: Patch critical RCE vulnerability in MSMQ service). However, this update seems to cause issuesfor some users.
[German]It is an exotic bug that Microsoft has just confirmed for Windows 11 22H2. After installing the update KB5022913, there can be sporadic problems in the language recognition of the operating system. However, the whole thing only occurs when Chinese or Japanese language inputs are made. So it should only affect a few readers of this blog.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Sounds bizarre, is bizarre and unfortunately true. When users have a certain song played, the Alam function of the Google Pixel Android smartphones fails. The background is that the assistant then responds to the lyrics of the song "Where is my Mind" by the band Pixies. This contains a well-understood word STOP at the very beginning. Meanwhile, the band means "sorry" – and I mean, who does that?
[German]Microsoft has released the 2023 H1 Cumulative Update for Exchange Server 2019, effective May 3. Also sailing under the acronym CU13, the update brings Modern Auth to Exchange 2019 and Outlook on Windows and is said to fix nearly 200 bugs. Microsoft says the setup preserves the administrator's custom configuration settings.
[German]Microsoft provides information about known bugs and issues in Windows 10, 11 and Windows Server 2022 in the Known Issues category of its Windows Release Health status page. However, administrators from companies often do not have the time to check the pages to see if there are any new reports. Now Microsoft is offering the option for administrators from corporate environments to sign up for an email notification via their Microsoft 365 Admin Center.
[German]Have you been offered the update KB4023057 (Update Service component) under Windows 10/11 in the last days? Last week, I came across a few messages on the web – and German blog reader Volker just reported that on May 3, 2023, update KB4023057 was automatically installed under Windows 10 Enterprise 22H2, build 19045.2913, despite the default setting "Ask before each installation". I had last reported about the tool on April 21, 2023 in the post Windows Update Service components update KB4023057 April 2023 Refresht.
[German]In a coordinated action called SpecTor, Europol, the FBI and other law enforcement agencies arrested 288 operators and customers of a darknet platform where drugs were being transshipped. The operation covered 9 countries. Law enforcement authorities also seized the illegal dark web marketplace "Monopoly Market".
MVP:
2013 – 2016
WIMVP:
2017 – 2020
