[German]At the beginning of December 2022, there was an outage of the Exchange instances of the US provider Rackspace that lasted several days. Now the company has confirmed that a ransomware attack on its servers was the reason for this outage. It is unclear whether customer data was affected by this incident. There is at least a suspicion that the ProxyNotShell vulnerabilities enabled this attack.
[German]Netgear has released a last-minute patch to close a vulnerability in the firmware of the Nighthawk WiFi6 router (RAX30 AX2400) on December 1, 2022. A misconfiguration allowed attackers in router firmware prior to version V1.0.9.90 to communicate with these devices from the Internet as if they were on the consumer's local network. In addition, the firmware's auto-update function seems to be broken. Security provider Tenable has now published details about this.
[German]As of December 6, 2022 (first Tuesday of the month), Microsoft has released non-security updates for versions of Microsoft Office that are still supported. This month, there is only one update for Microsoft Office 2016. Microsoft Office 2013 has not received any updates. Here is a brief overview of the November 2022 updates.
[German]It looks like the Windows updates released by Microsoft in November 2022 may cause problems accessing SQL databases. Then the ODBC driver triggers a database access error. According to Microsoft, all Windows versions that are still supported (both clients and servers) are affected by this problem. There is no solution for this problem yet.
[German]Citrix is warning users since September 2022 about a vulnerability in its Citrx Workspace app. There are reports that Citrix SSON stored passwords in the process memory can be retrieved at the user level. Updates are provided in the December 2, 2022 update to close the vulnerability. However, it looks like the information is still accessible for administrator accounts.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft's developers have implemented a bug in the new Windows 11 version 22H2 (and also in Windows 11 21H2), which will prevent administrators to use Group Policy Preferences (GPP). If you try to set up a scheduled task in the Group Policy Management Editor, you will fail with a script error. This is because a DLL with a broken script is used in the Scheduled Tasks preferences. The error also occurs in the Group Policy Management Console (GPMC).
[German]Microsoft has raised the Edge browser in the Stable Channel and Extended Stable Channel to version 108.0.1462.42 on December 5, 2022. It is a new development branch (108 version) that also fixes vulnerabilities reported by the Chromium team and already exploited in the wild.
[German]With the end of support for the Windows 7 and Windows 8.1 operating systems, Google will also end support for the Google Chrome browser. Google has therefore started to warn users of this browser on Windows 7 and Windows 8.1 – and also on its server pendants – that support is ending and that they should switch to Windows 10. After being asked bei German blog reader how to disable this warning, here's a brief overview of the issue.
[German]External USB storage media and USB devices are in daily use, but pose a threat to corporate data. Data can be copied/extradicted too quickly. And there is a risk of malware being introduced via USB sticks or other USB storage devices. Microsoft has therefore introduced Microsoft Defender for Endpoint with a set of features to control such devices on Windows.
Microsoft had confirmed a game performance issue on Windows 11 version 22H2 as of November 10, 2022 (see Windows 11 22H2: Game performance issues confirmed by Microsoft). Stuttering or similar problems can occur in some games and applications. The cause is probably an unintentional activation of the GPU performance debugging features. The upgrade block set by Microsoft was first loosened (Windows 11 22H2: Upgrade block for reduced game performance reduced), and will now be lifted in mid-December 2022 – which I have added in the above blog post.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
