[German]Short message for administrators who need installation media for Windows that are at the current patch level (i.e. already contain the current updates). Microsoft has released the installation images with the update status December 2022 as of December 20, 2022. These can be accessed from the Visual Studio Subscription Center for Windows 10, Windows 11 and Windows Server 2022.
[German]The Irish data protection authority DPC has just launched an investigation into a data leak involving 5.4 million Twitter user data (see Irish data protection authority launches investigation into Twitter after data breach). Now a new data breach seems to becomming true. A credible threat actor claims to have the data of 400,000,000 Twitter users and is trying to sell it.
to all my blog readers.
Frozen Rose with ice crystals, Canon A20, December 2004
[German]After 5.4 million user data of Twitter users or accounts were tapped by hackers via an API vulnerability and then shared in a hacker forum, the data protection authorities are also taking action. The data protection authority in Ireland, which is responsible for Twitter in Europe, announced on Dec. 23, 2022, that it would open a formal investigation against Twitter.
[German]French CNIL issued a fine of 60 million euros against Microsoft Ireland on December 19, 2022. It is about the fact that Microsoft (in the Bing search engine) had not set up a mechanism that allows to reject cookies as easily as to accept them.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]I'm picking up on a topic that was brought to my attention by a blog reader. It's been on my mind for a while, but I can't check anything due to a lack of accounts. It is about the management of tenants in the Microsoft 365 portal – Microsoft is pushing the march to the cloud – and the customers should get the licenses from trading partners (only large customers get the licenses directly from Microsoft). In this case, however, the trading partner is stored as the global administrator in the tenant. This is a security risk.
Continue reading
We have iOS 16.2 and the Polar Flow app 6.11 was released on December 21, 2022. Blog reader Thomas B. just informed me via email that there were problems. Quote: The Polar app 6.11 or older on an iOS 16.1.x or older does the hourly sync of the watch with the app on the iPhone. If the iOS is updated to 16.2, only the manual sync will work, the hourly will not.
[German]Small note for administrators who manage Android mobile devices via Intune. Microsoft has worked with Samsung to fix a bug that prevents devices from integrating with Intune when upgrading to Android 13. A fix is available to ensure Samsung Android 13 devices can once again be managed through Microsoft's Intune MDM solution.
Continue reading
[German]The next serious security incident that the provider LastPass has to admit. LastPass just announced that a threat actor had stolen a backup copy of its customers' encrypted vault data (Vault Data). The coup was accomplished using cloud storage keys stolen from a LastPass employee in August 2022. Should the attacker be able to crack the encryption, access to the stored user access data would be possible – the absolute GAU.
[German]Around the out-of-band update for the Hyper-V issue with Windows Server 2019/2022, a blog reader contacted me. He is experiencing an issue where the Container feature cannot be installed as a role on Windows Server 2019. The installation attempt aborts with error 0x800F0831. Here is some information about the problem and possibly workarounds (there is an article from Microsoft about this as of Oct 28, 2022).
MVP:
2013 – 2016
WIMVP:
2017 – 2020
