[German]The developers of Thunderbird have released another update to the email client to version 102.5.0 on November 15, 2022 (thanks to the reader for pointing this out). It's a bug-fix update that should fix a number of issues and also some vulnerabilities.
Continue reading
[German]Today another observation from an administrator regarding update management via WSUS. On a Windows Server 2019, the defaults are set via GPO so that updates are automatically installed every Monday/Thursday at 1am and the server should be restarted afterwards. But with the November 2022 updates this did not work, the installation including reboot happened on Friday from 6pm, the day the administrator had approved the updates on WSUS.
[German]Mozilla's developers have released the versions 107.0.0 and 102.5.0 ESR of the Firefox browser on November 15, 2022. The ESR versions are maintenance updates that are supposed to fix bugs. Firefox 107 is a new development branch. In both updates, vulnerabilities are fixed. Thanks to the reader for the tip.
Continue reading
[German]US online seller Amazon is currently experiencing stormy times. The company has suffered a dramatic loss of value in its share price, which reaches 1,000 billion US dollars. It has now been rumored that Amazon is likely to make major layoffs this week. Around 10,000 employees will probably have to leave.
[German]Brief note for administrators running Windows Server 2012 R2 who rely on Sophos user authentication via Sophos Security Heartbeats. Sophos has distributed an update that silently overrides the feature on Windows Server 2012 R2. A blog reader informed me of this, and I bring it up in the blog as this may interest/tangentially affect some other users.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has confirmed another issue with Kerberos authentication on Windows as of November 13, 2022 in conjunction with the November 2022 updates. I had already reported that the November 8, 2022 security updates could lead to these. Now Microsoft has revealed some more details about the issue.
[German]Microsoft has confirmed a problem with Direct Access connections on Windows 10 and Windows 11 as of November 13, 2022. I had already reported that the security updates from November 8, 2022 can lead to connection problems with Direct Acess. There is a way to roll it back via KIR, so that the functionality is ensured again until a final fix by Microsoft.
[German]Quick question to the Windows 10 users, if someone has also made the observation of a blog reader and can confirm this. A reader contacted me directly the other day and reported that his Windows 10 Pro (version should be the 22H2) automatically disabled the energy-saving mode. The system is not running in a domain, as the reader wrote, but is used for home automation.
[German]As of November 8, 2022, Microsoft has released security updates for its Office Online servers to close vulnerabilities in Word and Excel. According to my information, a vulnerability exists (Server-Side Request Forgery, SSRF, to RCE, Remote Code Execution) that Microsoft does not want to eliminate.
[German]Microsoft has released a so-called Out-of-the-Box Experience Update for Windows 10 on November 11, 2022, surprisingly for me. This is already available for Windows 10 versions 21H1, 21H2 and 22H2, but it only applies to systems with Windows 10 Home and Professional. It replaces an update from 2021 and is intended to enable a move to Windows 11 on eligible machines during a new Windows 10 installation.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
