[German]The Federal Office of Justice (Bundesamt für Justiz, BfJ) in Bonn has just issued two penalty notices against Telegram FZ-LLC. The reason is the fact that the company violated requirements of the Network Enforcement Act (Netzwerkdurchsetzungsgesetz, NetzDG) in 2021 and 2022. In total, the BfJ imposed fines of 5.125 million euros.
[German]Since May 2022, a bug has been known to exist in Windows that prevents the "Mark of the Web" flag from being set for files extracted from ZIP archives. Microsoft itself has not yet released a patch for this 0-day vulnerability. The vulnerability is already being exploited. Therefore, ACROS Security has addressed the problem and developed a 0Patch micropatch to close it. The patch is freely available, only the 0patch agent is needed.
[German]As of October 17, 2022, Microsoft has released an unscheduled update KB5020387 for Windows 11 21H2. This update fixes a connection problem that can occur with SSL and TLS connections. All Windows client and server versions that are still in support are probably affected by this problem. The update also fixes a connection issue with Citrix clients that I just reported on.
[German]Small addendum from last week. Since the October patchday (October 11, 2022), administrators of Citrix installations have noticed that connections no longer work for Citrix clients once Windows update KB5018410 has been installed. This update for Windows 10 version 20H2-21H2 is likely where the TLS 1.0/1.1 issue struck. Addendum: It seems that an out-of-band update from Microsoft has fixed this issue.
[German]On Monday, October 17, 2022, it was announced that Microsoft has announced layoffs in several areas. This is the next step after tech groups had already announced a hiring freeze due to the downturn in the economy. Now, jobs are specifically being cut.
I just received a message that a maintenance update to WordPress 6.0.3 has been released. This update closes some vulnerabilities, which are described here. Here the update has worked without any noticeable issues.
[German]Warning regarding a new phishing campaign that a blog reader alerted me to via email today (October 17, 2022). The mail apparently comes from Microsoft and claims that the password for the email account has been changed. If one had been, one need not respond. If you have not changed your password, your mailbox has been compromised and you need to react. And there was a hint that the password change was made from North Korea …
Small reminder: Nine years ago, on October 17, 2013, the then "new" Windows 8.1 was released as a free upgrade to the hapless Windows 8 general. The release to manufacturing (RTM) date was August 27, 2013, and my ears were ringing with Microsoft's praise of how great it was. At the time, "touch operation" was all the rage – today, hardly anyone in Windows talks about this feature.
[German]Brief information for administrators in the Windows environment. A reader just informed me that Windows Update KB5012170 has been re-released in WSUS. This update was released on Patchday, August 9, 2022 to fix issues in Secure Boot DBX. However, this update caused significant issues with Bitlocker for some users, up to and including systems no longer booting.
[German]Brief note from Sysinternals tools – Mark Russinovich's team has released ZoomIt v6.1. ZoomIt is a screen zoom, annotation and recording tool for technical presentations that include application demonstrations.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
