Microsoft Defender Threat Intelligence now with hash and URL search

Posted on 2023-04-23 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Small addendum: Microsoft expanded its Microsoft Defender Threat Intelligence (Defender TI) this week. Defender TI now includes functions that allow logged-in users to check file hash values. It also adds support for a URL search. This should allow security managers or security researchers to check whether URLs or files are malicious. Microsoft tries to counter Google's Virustotal, but requires a user login to use Defender TI.

Continue reading →

Posted in Security | Tagged | Leave a comment

Nearly two-thirds of XIoT vulnerabilities remotely exploitable

Posted on 2023-04-23 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]From a security perspective, I think we're in for a disaster – I've had Claroty's State of XIoT Security Report: 2H 2022 for a few days now. It does show the positive impact of increased vulnerability research and increased vendor investment in XIoT security. But the message is also that number of vulnerabilities discovered has increased by 80% this readiness. Many XIoT vulnerabilities are also remotely exploitable.

Continue reading →

Posted in devices, Security | Tagged | Leave a comment

Microsoft Store for Business: Will be removed in May 2023

Posted on 2023-04-22 by guenni

Continue reading →

Posted in Windows | Tagged , | Leave a comment

Windows April 2023 Updates: Netlogon- and Kerberos protocol changes, there seems to be issues

Posted on 2023-04-22 by guenni

Windows[German]Microsoft has indeed postponed its schedules for phased adjustments to the Netlogon protocol (due to CVE-2022-38023) and the Kerberos protocol from April 11, 2023 to June 13, 2023. But with the Windows update of April 11, 2023, the option to disable RPC sealing in the registry has already been removed. In the meantime, the first problems are being reported and a Microsoft employee has just asked administrators to test the systems, as I saw on Twitter.

Continue reading →

Posted in General, Software | Tagged , , | Leave a comment

Microsoft moves tenant security standards in Azure AD to MFA by May 8, 2023

Posted on 2023-04-21 by guenni

[German]Microsoft is forcing/moving Azure AD customers to MFA authentication as a security standard within days. A German blog reader just informed me that he (as a global Azure AD admin) received a notification from Microsoft and that his organization will be migrated to this security standard on May 8, 2023.

Continue reading →

Posted in General | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Microsoft 365 has been disrupted – apps missing sporadically (April 20, 2023)

Posted on 2023-04-21 by guenni

[German]There was a disruption of Microsoft 365 services (I got first reports on April 19, 2023) during the last hours. User can't reach apps in Microsoft 365 – the page ist empty. Microsoft investigated that and has now recovered, according to tweets dated April 20, 2023. Here is a short overview, what we know so far.

Continue reading →

Posted in Cloud, issue | Tagged , | Leave a comment

Windows Update Service components update KB4023057 April 2023 Refresh

Posted on 2023-04-21 by guenni

Windows[German]Microsoft must have quietly released an updated version of update KB4023057 (Microsoft Update Health Tools, formerly Preparatory Update or Update for Windows Update Service Components) for machines running Windows 10/11 in April 2023. The goal is to improve the reliability of the Windows update process and to find and fix update problems on Windows 10/11 systems that prevent an upgrade.

Continue reading →

Posted in Update, Windows | Tagged , , | Leave a comment

Trend Micro Endpoint UMH component collides with Windows April 2023 updates

Posted on 2023-04-20 by guenni

Windows[German]As of April 11, 2023, Microsoft has released a slew of security updates for the still-supported versions of Windows, some of which address critical vulnerabilities. Administrators and users running Trend Micro Endpoint on Windows need to be wary of the April 2023 updates. The vendor has confirmed an issue that its antivirus solution is not compatible with the April 2023 updates for Windows and there are issues. Continue reading →

Posted in Security, Software, Windows | Tagged , , , | Leave a comment

Edge 112.0.1722.54

Posted on 2023-04-20 by guenni

EdgeMicrosoft updated the Edge browser to version 112.0.1722.54 (security and bug fixes) on April 19, 2023 in the Stable Channel. Readers have alerted me to the browser's new update. According to the release notes, the Chrome vulnerability CVE-2023-2136 is closed.

Posted in browser, Security | Tagged | Leave a comment

Windows 11: Defender update KB5007651 brings FASR, fixes LAS bug, but still causes issues

Posted on 2023-04-20 by guenni

Windows[German]Microsoft has released Defender Update KB5007651 for its anti-malware platform, version 1.0.2303.27001 for Windows 11, effective April 18, 2023. The update is intended to fix a Local Security Authority (LSA) bug in Windows 11 and brings "hardware-assisted protection" in the form of FASR (Firmware Attack Surface Reduction). A German blog reader contacted me about this and reports that the Defender Memory Access Protection option is no longer changeable. In addition, there is still a message that "Security Health Service exe" is crashing. As it turns out, the new FASR feature under Windows 11 is only available on newer CPUs (from Intel 11 Gen. and AMD counterparts).

Continue reading →

Posted in issue, Security, Update, Windows | Tagged , , | Leave a comment