[German]Brief addendum from this week for Outlook users or administrators. Microsoft seems to have fixed the bug that the Outlook Contacts view covers "People" windows as of October 11, 2022. Also, I have a workaround for the problem with Outlook suddenly requesting a password to sync with the email server. Both issues had been addressed in posts here on the blog.
[German]It is a start-up in the security sector that makes you sit up and take notice, but at the same time (at least for me) makes you shake your head. There is a new security company Dream Security that wants to focus on protecting critical infrastructure – especially in European countries. The founders are Sebastian Kurz (ex-Chancellor of Austria) and Shalev Hulio (ex-head of spyware provider NSO).
[German]The European Commission (EU) is planning another antitrust case against Google in 2023. It is again about Google's digital advertising business and the EU competition authorities may impose the fourth fine in the EU amounting to more than one billion euros. This is reported by Reuters news agency with reference to people familiar with the matter.
[German]Microsoft has back ported a group policy from Windows 11/Windows Server 2022, to protect local administrator accounts against brute-force attacks, to all supported Windows versions. This feature will be available with the Windows security updates released on October 11, 2022. This is intended to make one of the three most common methods of attacking Windows computers today more difficult. This is because administrators can use Group Policy to specify that an administrator account should be locked after a certain number of logon attempts.
[German]If the upgrade to Windows 11 22H2 is not offered on actually compatible machines, the cause may be a problem with Windows Hello. Microsoft has confirmed this in its own October 10, 2022 status post. However, the problem can be fixed with an update – and therefore Microsoft wants to
[German]There is an authentication bypass vulnerability CVE-2022-40684 in the FortiGate firewalls, FortiProxy web proxies and FortiSwitch Manager (FSWM) that allows attackers to access the products without authentication. Fortinet had already warned in early October 2022 – but attacks on the systems are probably taking place in the meantime. Administrators should check the affected products for compromise as soon as possible and secure the systems.
As of October 11, 2022, Microsoft has released several more updates for the .NET Framework. Update KB55018543 is the Security and Quality Rollup for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10, version 20H2. Then there is KB501935 (.NET 6.0 Update) and this GitHub page for .NET Core 3.1.3. The colleagues from German site deskmodder.de have published an overview with links to release notes here.
[German]The developers of Thunderbird had to release another update of the email client to version 102.3.3 on October 12, 2022. It is a bug-fix update, which should fix a number of problems. Continue reading
[German]Tip for people who are still running Windows 7 SP1 and/or Windows Server 2008 R2 and want to continue securing the system. ACROS Security will continue to support these systems in 2023 and 2024 with micropatches that close known vulnerabilities.
[German]On October 11, 2022 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for still-supported Microsoft Office versions and other products. The updates are available for the installable MSI version of Microsoft Office (the click-to-run packages obtain the updates through other channels). Office 2019 does not appear in the list because it is distributed via click-to-run packages and receives security updates via the Office Update feature. Below is an overview of the available updates.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
