Leaked Microsoft mails provide interesting insights

Posted on 2023-04-01 by guenni

[German]I wrestled with myself a bit about what to do with the material, but then decided to publish the blog post after all. An anonymous source has send me leaked data that must have come from the "Microsoft universe" (maybe have been pulled as part of the Bing BigBang incident). Snippets of communications from Microsoft's mangement provide interesting insights into how Nadella and Co. conduct themselves publicly and how they act internally.

Continue reading →

Posted in General | Tagged | Leave a comment

Vulkan Files Exposes Russia's Cyberwar Strategies

Posted on 2023-03-31 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Files leaked from a whistle blower to German news magazine Süddeutsche Zeitung show how Russia under Putin is planning cyberwar. An evaluation by a media collective shows: Train and air lines are to be attaced, as well as energy supply and critical infrastructure. And our security culture continues to rely naively on increased digitization, including the cloud and up-to-date virus scanners.

Continue reading →

Posted in Security | Tagged | Leave a comment

World Backup Day March 31, 2023

Posted on 2023-03-31 by guenni

Amazon[German]March 31st of every year is "World Backup Day", and it's to remind people of the importance of backups. To mark the day, a little kaleidoscope of information around this topic.

Continue reading →

Posted in General, Security | Tagged , | Leave a comment

QNAP QTS update closes vulnerabilities (March 29, 2023)

Posted on 2023-03-31 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]As of March 29, 2023, manufacturer QNAP has published a security advisory for its QTS operating system. With an update of the QTS software, the manufacturer closes the vulnerabilities CVE-2022-3437, CVE-2022-3592, CVE-2022-27597, CVE-2022-27598, CVE-2022-42898, CVE-2023-22809. Here is a brief overview of this issue.

Continue reading →

Posted in devices, Security, Software, Update | Tagged , , | Leave a comment

Thunderbird 102.9.1

Posted on 2023-03-30 by guenni

[German]The developers of Thunderbird have released another update of the email client to version 102.9.1 on March 28, 2023. It is a bug fix and security update, which should eliminate vulnerabilities.

Continue reading →

Posted in Security, Software, Update | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Bi(n)gBang: Microsoft Azure vulnerability allows Bing search hijacking and Office 365 data theft

Posted on 2023-03-30 by guenni

[German]A nice case about the risk of the cloud. Microsoft 's Azure may have allowed a misconfiguration of some apps or services. As a result, attackers could potentially inject malicious code into Bing search results pages to manipulate them. It would also have been possible to use captured Bing credentials to tap data from Microsoft Office 365 applications. As the saying goes, everything is connected to everything else. Here's an outline of what just became known.

Continue reading →

Posted in Cloud, Security | Tagged , , , | Leave a comment

Deprecated Remote PowerShell gets reprieve in Exchange Online

Posted on 2023-03-30 by guenni

Exchange Logo[German]To force administrators of Exchange instances to the more secure PowerShell v3 modules, Microsoft plans to discontinue Remote PowerShell (RPS) in Exchange Online. It was supposed to be disabled for all customers starting June 2023 – and already on April 1, 2023, Microsoft blocked newly created RPS connections for all tenants. Now, as of March 27, 2023, Microsoft has announced in a Techcommunity post that Remote PowerShell will get a reprieve in Exchange Online.

Continue reading →

Posted in Cloud, Security, Software | Tagged , | Leave a comment

Microsoft confirms: Defender has flagged legitimate URLs or files as malicious (DZ534539)

Posted on 2023-03-30 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Have you had more frequent messages from Microsoft Defender blocking legitime  URLs the last few days when accessing websites? Or was the access to files blocked because of alleged malware? Microsoft has now confirmed that there was an issue and that the Defender included in Windows was blocking unauthorized access to files and URLs because they were considered malicious.

Continue reading →

Posted in issue, Security, Software, Windows | Tagged , | Leave a comment

Outage EX534197 with Exchange Online (March 28/29, 2023)

Posted on 2023-03-30 by guenni

Stop - Pixabay[German]Microsoft's cloud service Exchange Online seems to have been disrupted the day before yesterday and yesterday (March 28/29, 2023). The disruption began as early as March 28, 2023, at around 2:00 p.m., when users were unable to log in. Microsoft has confirmed this and writes that there is probably also a service disruption, so that emails on Exchange Online are quarantined. Blog-Oser Andreas P. informed me by mail and sent me the MS status information (thanks for that). Here's a quick overview of what's going on.

Continue reading →

Posted in Cloud, issue | Tagged , | Leave a comment

3CX desktop app (probably) infected in a supply chain attack (March 29, 2023)

Posted on 2023-03-30 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Warning to customers of phone system provider 3CX. Its 3CX Desktop app has probably been infected with malware via a supply chain attack. At least, that's what various reports from security companies as well as posts on reddit.com suggest. Here's an overview of what I've found out so far after a quick reader tip (thanks for that).

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment