Born's Tech and Windows World

[German]It's a strange bug that a blog reader just reported to me in the terminal server environment with Office. In a constellation under Windows Server 2022, reproducible display errors occur under Microsoft Office during an installation with Remote Desktop Services (RDS). In certain display constellations all text characters in a Word window disappear after some time. But there is a workaround, so I'll post it in the blog, maybe there are more affected people.

Continue reading →

[German]Security researchers at CrowdStrike have discovered a new exploit method for the NotProxyShell vulnerabilities CVE-2022-41080 and CVE-2022-41082 while analyzing several Play ransomware cases. The ransomware uses a new exploit method to bypass Microsoft's URL rewrite rules (in response to ProxyNotShel) for Autodiscover. The exploit allows remote code execution (RCE) via Outlook Web Access (OWA) and is then used to infect vulnerable Exchange servers. The new exploit method is referred to as OWASSRF. Addendum: CERT-EU has added the new exploit method to it's 0-day Exchange exploit list.

Continue reading →