[German]It's a story that came to my attention recently, though the behavior may be familiar to many administrators. An administrator had purchased a refurbished machine and then re-installed it with Windows 10 Pro. But even as it was being reinstalled, the machine was prompting the user to log into Azure, with a Klarna Bank AB account …
[German]Quick note to owners and administrators of Dell docking stations connected to notebooks via Thunderbolt. A reader informed me about problems with the WD22TB4, in connection with Dell notebooks (5530, 5430, 5431). After a reboot, monitors attached to the docking station remain inactive and cannot be activated. The remedy is to change the Thunderbolt port. Dell told this user that they are already working on this issue. But it seems to affects other vendors also.
[German]Windows 10, Windows 11 (and also their server counterparts) contain a huge flaw that may lead to a security disaster. Attackers can create "mock folders" and store malware there. This alows to run malware with administrator rights (without a UAC prompt). Security features like AppLocker or Software Restriction Policies (SRP or SAFER for short) are probably no longer effective either. Is known to security circles, the issue has now come into my radar through an attack.
[German]Users of the Bitwarden password manager run into the risk of the auto-fill feature leaking credentials when visiting websites. Malicious websites could steal credentials via an IFRAME embedded in trusted pages and send them to an attacker.
[German]Quick question for Windows users and administrators – and specifically for Windows Server administrators – did you encounter Windows Defender signature updates installation errors within the last couple of hours? I'm receiving more and more reader reports that Defender update KB2267602 (versions 1.383.1400.0 and beyond) are causing install errors and is failing. Update: There are workarounds.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Currently (March 8, 2023), production at the Airbus site in Nordenham/Germany seems to be halted (at least in parts). The background to this seems a cyber attack on the logistics service provider (named by my informants as LTS), whose systems probably have been affected by ransomware. Without the systems of this logistics service provider, production at the Airbus plants will probably no longer be possible in the long term. Currently, however, I do not have any confirmation from the logistics service provider. But several sources and Airbus have confirmed the information.
[German]A small note for users of the backup software from the manufacturer Veeam. As of March 7, 2023, Veeam has fixed a critical vulnerability (CVE-2023-27532) in its Backup & Replication product in versions V11a/V12 via an update. The update via a cumulative update should be applied promptly. Update: There is now an exploit, exploitation likely soon.
[German]Administrators of Fortinet's FortiOS and FortiProxy must become active. The manufacturer has published various security advisories for different products as of March 7, 2023. Among other things, a DoS vulnerability CVE-2022-45861 in FortiOS and FortiProxy are addressed. Some of the vulnerabilities are very critical (CVSSv3 score 9.3).
[German]It is an issue that has been bothering users for months. There is a bug in Windows 11 22H2 that causes a serious speed drop when copying large files. Since December 2022 I have been hoping that this would be fixed with a patch. But now this bug is fixed with the lastest preview update, as I just found out.
[German]Google has released updates to Google Chrome Browser 111 in the stable channel for Mac, Linux and Windows as of March 7, 2023. Mac and Linux now reach version 111.0.5563.64, while for Windows, versions 111.0.5563.64/.65 are ready. These are security updates that fix critical vulnerabilities. The Extended Stable Channel and Android have also been updated.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
