[German]There seems to be a problem with the November 2022 security updates for Windows. At least for Windows 11 22H2, I have reports that DirectAccess connections in the network no longer work after the update installation. But there are also indications that the problem occurs on Windows 10. I'll take it up here on the blog in case there are affected people among the blog readership.
[German]Apple has released iOS/iPadOS 16.1.1 for newer iPhone and iPad models on November 9, 2022. It is a security and maintenance update that is supposed to fix a WLAN problem. Thanks to Gerold for the tip. Continue reading
[German]I'm not sure if this affects anyone in the readership. Do you have Citrix Netscaler (ADC) installations that show a "Freemium" license status after an upgrade? Citrix has published an advisory as of November 8, 2022, but it was deleted as of November 9, 2022. However, there is a discussion on the Citrix forum about this very bug. And I got a comment in my German blog post, where a reader was hit with that issues on 3 systems. Here is some information about it.
[German]Another small addendum to the November 2022 patchday. With the security updates of November 8, 2022, Microsoft has also initiated a gradual change to the Netlogon and Kerberos protocols. The whole thing will be carried out in several stages until October 2023. The reason is three vulnerabilities (CVE-2022-38023 and CVE-2022-37967) in Windows 8.1 to Windows 11 and the server counterparts. Administrators must react accordingly to ensure that these changes are taken into account in network communication. Addendum: Microsoft has released an out-of-band-update to fix the issue – see Out-of-band updates fixes Kerberos authentication issues on DCs (Nov. 17, 2022).
[German]On (November 8, 2022 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for still-supported Microsoft Office versions and other products. The updates are available for the installable MSI version of Microsoft Office (the click-to-run packages obtain the updates through other channels). Office 2019 does not appear in the list because it is distributed via click-to-run packages and receives security updates via the Office Update feature. Below is an overview of the available updates.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Now it's official, shortly after the US midterm elections, Mark Zuckerberg, the head of Facebook's parent, Meta, announces mass layoffs. The company, which operates Facebook, Instagram and WhtsApp, plans to lay off 11,000 employees. That's an estimated 13 percent of its workforce. Other steps are intended to make Meta a leaner and more efficient company.
[German]Google has released a slew of security updates for Google Chrome in the 107 branch in the stable channel for Mac, Linux and Windows as well as for Android (and iOS) on November 8, 2022. Ten vulnerabilities are closed in the process. Continue reading
[German]Microsoft has also released security updates for Windows 7 and 8.1 as well as for the Windows Server counterparts 2008 R2 and 2012/R2 on Patchday. Here is an overview of these updates for Windows 7/8.1 and the corresponding Windows Server versions 2008 R2 and 2012/R2.
[German]On November 8, 2022 (second Tuesday of the month, Microsoft patch day), Microsoft also released cumulative updates for Windows 11 22H1 and 22H2. In addition, Windows Server 2022 received an update. Here are some details about these updates, which are supposed to fix vulnerabilities as well as issues.
Continue reading
[German]Microsoft has released security updates for Exchange Server 2013, Exchange Server 2016 and Exchange Server 2019 as of November 8, 2022. These updates are intended to address NotProxyShell vulnerabilities that have been known (and already exploited) since late September 2022, as reported by external security partners.
Continue reading
MVP:
2013 – 2016
WIMVP:
2017 – 2020
