[German]It is a start-up in the security sector that makes you sit up and take notice, but at the same time (at least for me) makes you shake your head. There is a new security company Dream Security that wants to focus on protecting critical infrastructure – especially in European countries. The founders are Sebastian Kurz (ex-Chancellor of Austria) and Shalev Hulio (ex-head of spyware provider NSO).
[German]The European Commission (EU) is planning another antitrust case against Google in 2023. It is again about Google's digital advertising business and the EU competition authorities may impose the fourth fine in the EU amounting to more than one billion euros. This is reported by Reuters news agency with reference to people familiar with the matter.
[German]Microsoft has back ported a group policy from Windows 11/Windows Server 2022, to protect local administrator accounts against brute-force attacks, to all supported Windows versions. This feature will be available with the Windows security updates released on October 11, 2022. This is intended to make one of the three most common methods of attacking Windows computers today more difficult. This is because administrators can use Group Policy to specify that an administrator account should be locked after a certain number of logon attempts.
[German]If the upgrade to Windows 11 22H2 is not offered on actually compatible machines, the cause may be a problem with Windows Hello. Microsoft has confirmed this in its own October 10, 2022 status post. However, the problem can be fixed with an update – and therefore Microsoft wants to
[German]There is an authentication bypass vulnerability CVE-2022-40684 in the FortiGate firewalls, FortiProxy web proxies and FortiSwitch Manager (FSWM) that allows attackers to access the products without authentication. Fortinet had already warned in early October 2022 – but attacks on the systems are probably taking place in the meantime. Administrators should check the affected products for compromise as soon as possible and secure the systems.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
As of October 11, 2022, Microsoft has released several more updates for the .NET Framework. Update KB55018543 is the Security and Quality Rollup for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10, version 20H2. Then there is KB501935 (.NET 6.0 Update) and this GitHub page for .NET Core 3.1.3. The colleagues from German site deskmodder.de have published an overview with links to release notes here.
[German]The developers of Thunderbird had to release another update of the email client to version 102.3.3 on October 12, 2022. It is a bug-fix update, which should fix a number of problems. Continue reading
[German]Tip for people who are still running Windows 7 SP1 and/or Windows Server 2008 R2 and want to continue securing the system. ACROS Security will continue to support these systems in 2023 and 2024 with micropatches that close known vulnerabilities.
[German]On October 11, 2022 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for still-supported Microsoft Office versions and other products. The updates are available for the installable MSI version of Microsoft Office (the click-to-run packages obtain the updates through other channels). Office 2019 does not appear in the list because it is distributed via click-to-run packages and receives security updates via the Office Update feature. Below is an overview of the available updates.
[German]Microsoft has updated the Edge browser in the stable channel to version 106.0.1370.42 as of October 10, 2022. This is a bug-fix update that is supposed to iron out various problems. The release notes don't really give anything away. It only says: Fixed various bugs and performance issues. In case Edge won't launch after update, read Edge 106.0.1370.37 with bug fixes; failed start issue not fixed.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
