[German]Security researchers from ESET have discovered a malware in the wild that hijacks the UEFI and has been christened BlackLotus. BlackLotus is believed to be the first UEFI bootkit malware in the wild that can bypass Secure Boot on Windows 11. Malware can then also disable Defender or Bitlocker and HVCI in Windows. So much for the highly praised security with UEFI, Secure Boot & Co. under Windows 10/11.
[German]Zum 28. Februar 2023 hat Microsoft das Moments 2-Update KB5022913 als Preview für Windows 11 22H2 veröffentlicht. Dieses bringt zwar zahlreiche Neuerungen und soll zum März 2023 Patchday breit ausgerollt werden, kollidiert aber mit einem GUI-Tools von Drittanbietern. Wer den ExplorerPatcher oder StartAllBack installiert hat, muss diese Tools deinstallieren. Andernfalls besteht Gefahr, dass das System nicht mehr startet.
[German]Microsoft has released the optional cumulative (preview) update KB5022913 for Windows 11 version 22H2 on February 28, 2023. It is the so-called Moments 2 update, which contains a number of new features and especially a long list of bug fixes. Below I give an overview regarding these updates for Windows 11.
[English]Administrators of Windows Server 2012 R2 (Essentials) had the unpleasant experience that the security updates from February 14, 2023 could not be installed, but were aborted with the installation error 0x800F0922. As of February 28, 2023, Microsoft has now released a new Servicing Stack Update (SSU) to fix this installation error.
[German]Microsoft has released the update for Windows 11 called Moments 2 22H2. This update brings several innovations to the platform. This ranges from the new AI-powered Bing, to improved touch operation, to Phone Link for iOS. There are also full-screen widgets and quick access to the generally available Windows 365 app. Windows 11 also includes new AI features in the Start menu (an integration with Bing search in the taskbar) and ongoing updates to make the OS more accessible and sustainable.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]LastPass was the victim of two hacks in 2022, in which attackers gained access to its infrastructure. At first, it was said that the development environment had "only been hacked". Then the extent of the attack and a second attack on the cloud service for managing passwords gradually became public. Now LastPass has revealed more information about how the 2nd hack could have happened. The attack probably succeeded via a compromised private PC of a developer who was one of four people who had access to the company's private keys.
[German]Information for users who use security features of the provider Cyren (e.g. NoSpamProxy). The provider Cyren is in economic difficulties and will probably be liquidated – the relevant services will be discontinued. The provider NoSpamProxy has already reacted and plans to release an adapted version 14.0.5. It is possible that other products (e.g. SecurePoint's UTM, see reader comment), which are based on Cyren's security functions, are also affected.
[German]Vendor HP published a security article on February 21, 2023, addressing BIOS updates for HP systems. Potential time-of-check to time-of-use (TOCTOU) vulnerabilities in the BIOS of certain HP PC products have been identified, allowing for arbitrary code execution, denial of service, and information disclosure (see this CERT post). The four vulnerabilities have a CVE v3.1 base score of 7.8; the details, including instructions for BIOS updates, can be found in this HP article. (via)
[German]Microsoft Defender is already integrated into the operating system as virus protection in Windows 10 and Windows 11. However, Microsoft has further plans and wants to integrate the Microsoft Defender app into its Microsoft 365 product (for consumers). This means that in the future, Microsoft will automatically install Defender app on systems on which Microsoft 365 apps (Family and Personal) are installed or updated. This primarily affects the Android, iOS and macOS operating system platforms, but the Microsoft Defender app will also be rolled out to Windows.
[German]Microsoft raised the Edge browser to version 110.0.1587.56 in the stable channel on February 25, 2023 (security and bug fixes). In the meantime, however, Edge is said to already be on version 110.0.1587.57.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
