Windows 11: Defender LSA bug fixed by "removing settings", and more Defender/FASR issues …

Posted on 2023-04-30 by guenni

Windows[German]Microsoft's unconventional solution for the so-called LSA bug caused by a Defender update in Windows 11. Users got to see the message "Local Security Authority protection is disabled …", but could no longer enable this feature. After several "repair" attempts, Microsoft has now announced a "fix" for Windows 11: They removed the option from the Windows 11 settings. In addition, new kernel protection features (e.g. FASR) have been introduced, but they cause issues. There are several requirements to be met to enable the new features. I'll summarize the information in a collective article.

Continue reading →

Posted in Security, Windows | Tagged , , | Leave a comment

SolarWinds hack in 2020: US Department of Justice knew 6 months in advance

Posted on 2023-04-29 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Does anyone remember the supply chain attack on SolarWinds' Orion software in 2020? That sent shockwaves through the IT landscape as masses of IT systems were hacked. Now it comes out that the US Department of Justice noticed the incident in its own networks six months before the whole thing became public, but failed to recognize the explosive nature of it. Even bigwigs like Microsoft, Mandiant and SW, who were called in, looked at the incident at SolarWinds without immediately realizing its explosive nature. This allowed the attackers to inspect the compromised systems for months.

Continue reading →

Posted in Security, Software | Tagged , , , | Leave a comment

Microsoft receives the German Big Brother Award 2023 for its "life's work"

Posted on 2023-04-29 by guenni

Stop - Pixabay[German]Microsoft received the German Big Brother Award 2023 for its "life's work" yesterday, April 28, 2023, because it uses its market power to force people, companies and public authorities to constantly transmit data during their digital activities, thereby making themselves subject to real-time surveillance. It is already the third Big Brother Award for Microsoft after 2002 and 2018 – that has to be achieved first.

Continue reading →

Posted in Office, Security, Software, Windows | Tagged , , | Leave a comment

Microsoft confirms: 22H2 is the final Windows 10 version, Windows 11 LTSC mentioned

Posted on 2023-04-28 by guenni

Update[German]Microsoft tried to tell people in a techcommunity post a few hours ago that Windows 10 version 22H2 is the last version of this operating system and that you should kindly switch to Windows 11. The tech community post also mentioned that they are planning to release a Windows 11 LTSC (probably in authum 2024).

Continue reading →

Posted in Windows | Tagged , | Leave a comment

Zyxel: Security advisory for CVE-2023-28771 in firewalls

Posted on 2023-04-28 by guenni

Sicherheit (Pexels, allgemeine Nutzung)Blog reader Liam had alerted me about vulnerability CVE-2023-28771 in Zyxel firewalls via email just a few days ago (thanks for that). An April 25, 2023 post states that improper handling of error messages occurs in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35. Zyxel has published the support article Zyxel security advisory for OS command injection vulnerability of firewalls. There you can also find information about which patches are available.

Posted in Security, Software | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

SonicOS SSLVPN: CVE-2023-1101 at MFA – new firmware for Gen6 firewalls (6.5.4.12-101n)

Posted on 2023-04-28 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Reminder for administrators using Sonic Wall products. There is a critical vulnerability in SonicOS SSLVPN that allows an authenticated attacker to use excessive MFA codes. The vulnerability, CVE-2023-1101, received a CVSS v3 index of 4.3 from SonicWall on March 28, 2023 (see this post).

Continue reading →

Posted in Security, Software | Tagged | Leave a comment

Apache Superset: CVE-2023-27524 allows Remote Code Execution (RCE)

Posted on 2023-04-27 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Brief note for users who deploy Apache Superset in their environment. There is a problem in the default configuration that the software can be attacked via remote code execution vulnerability. This becomes a problem if the server is accessible via the Internet.
Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Windows Server 2022: Microsoft eases licensing rules a bit

Posted on 2023-04-27 by guenni

Windows[German]Microsoft slightly relaxed the licensing rules for Windows Server 2022 in early April to correct some annoyances and better keep up with the competition. For example, the requirement that VMs with 20 cores require a total of 24 licenses was removed. The colleagues at The Register noticed this and they picked it up in the post Microsoft makes Windows Server 2022 licenses a little less cynical.

Continue reading →

Posted in Virtualization, Windows | Tagged , | Leave a comment

Microsoft Edge feature "Follow creators" sends nerly all visited website URLs to Bing API

Posted on 2023-04-27 by guenni

Edge[German]There are reports, that the Microsoft Edge browser is  transmit the URLs of all websites visited by the user to the API of Microsoft's search engine Bing. The "Follow creators" feature, which is now being rolled out more broadly for users, is probably responsible. This feature can be turned off, however, but is once again an example that Microsoft doesn't have its stuff under control and administrators are riding a hot razor blade when they unleash something like this on users.

Continue reading →

Posted in browser, Security | Tagged , | Leave a comment

Windows 11 21H2 Preview Update KB5025298 (April 25, 2023)

Posted on 2023-04-26 by guenni

Windows[German]Microsoft has released the optional cumulative (preview) update KB5025298 for Windows 11 version 21H2 on April 25, 2023. There are a number of new features and especially a long list of bug fixes. Below I give an overview regarding these updates for Windows 11.

Continue reading →

Posted in Update, Windows | Tagged , | Leave a comment