[German]On March 14, 2023, Microsoft released security updates for Windows clients and servers, for Office – as well as for other products. The security updates fix 76 CVE vulnerabilities, 9 of which are critical, 66 are important, and two are already exploited 0-day vulnerabilities. Below is a compact overview of these updates released on patchday.
[German]Microsoft has raised the Edge browser to version 111.0.1661.41 (and version 110.0.1587.69 in the Extended Stable Channel) on March 13, 2023 – security and bug fixes are included. In addition to fixed security vulnerabilities come some new Edge functionality, as well as the monstrous, much-criticized, but non-disable Bing button (Edge Copilot).
[German]There is a critical security vulnerability in the Lexmark firmware of various printers from this manufacturer. This is according to a security advisory issued by Lexmark on March 10, 2023. Hundreds of printer models are affected, including Lexmark MC3224, Lexmark B2338, Lexmark CX930 and Lexmark XC9335. Continue reading
[German]Brief information for administrators in the Windows Server area. Microsoft's developers held an "Ask Microsoft Anything" (AMA) chat about Windows Server updates and upgrades on March 9, 2023. In the online session, they answered questions from administrators. It covered questions about how to become more secure by upgrading older servers (versions 2008 and 2012), the importance of regular updates, and what security features are available for Windows Server 2022 and Windows Server on Azure.
[German]The European Commission is in the process of preparing a new agreement on data exchange with the USA, called the Trans-Atlantic Data Privacy Framework. For this purpose, the EU Commission announced a preliminary adequacy decision as of December 13, 2022. This is to be the successor to the EU-U.S. Privacy Shields data protection agreement, which was rejected by the European High Court (ECJ). Now the European Data Protection Authority (EDSA) have commented on the preliminary decision.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]They've done it again; despite class action lawsuits, damage awards and very bad publicity because of their firmware updates sold as "dynamic security updates"; which discourage users from using third-party ink cartridges. This refers to the inkjet printer manufacturer, the Hewlett Packard company. At the moment, numerous users are again reporting that they have fallen into this trap.
[German]It's a story that came to my attention recently, though the behavior may be familiar to many administrators. An administrator had purchased a refurbished machine and then re-installed it with Windows 10 Pro. But even as it was being reinstalled, the machine was prompting the user to log into Azure, with a Klarna Bank AB account …
[German]Quick note to owners and administrators of Dell docking stations connected to notebooks via Thunderbolt. A reader informed me about problems with the WD22TB4, in connection with Dell notebooks (5530, 5430, 5431). After a reboot, monitors attached to the docking station remain inactive and cannot be activated. The remedy is to change the Thunderbolt port. Dell told this user that they are already working on this issue. But it seems to affects other vendors also.
[German]Windows 10, Windows 11 (and also their server counterparts) contain a huge flaw that may lead to a security disaster. Attackers can create "mock folders" and store malware there. This alows to run malware with administrator rights (without a UAC prompt). Security features like AppLocker or Software Restriction Policies (SRP or SAFER for short) are probably no longer effective either. Is known to security circles, the issue has now come into my radar through an attack.
[German]Users of the Bitwarden password manager run into the risk of the auto-fill feature leaking credentials when visiting websites. Malicious websites could steal credentials via an IFRAME embedded in trusted pages and send them to an attacker.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
