[German]The vulnerability CVE-2022-35742 in Outlook was closed by Microsoft in August 2022 by means of security updates (see Patchday: Microsoft Office Updates (August 9, 2022)). However, Microsoft only provides updates for the MSI versions of Outlook 2013 and 2016. ACROS Security has now released a micropatch that closes the vulnerability in Microsoft Outlook 2010.
[German]A recent lawsuit filed by the Arizona Attorney General against technology company Google shows that the company continues to track users who have declined location tracking anyway. Thus, IP addresses of Google users served to obtain accurate location information and then used for Google services. On October 24, 2022, Arizona's lawsuit against Google is scheduled to be heard – and I think the EU will be watching closely as well, since Google is in the sights of EU antitrust watchdogs for various competition complaints and there are also GDPR complaints from consumer protection organizations.
[German]On September 13, 2022 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for still-supported Microsoft Office versions and other products. The updates are available for the installable MSI version of Microsoft Office (the click-to-run packages obtain the updates through other channels). Office 2019 does not appear in the list because it is distributed via click-to-run packages and receives security updates via the Office Update feature. Below is an overview of the available updates.
In performance regression testing, VMware testers found a severe performance drop for Linux guests when running kernel 5.19 in a VMware ESXi virtual machine with the Retbleed fixes installed. The degradation was up to 70% for computing, up to 30% in networking, and up to 13% in memory usage. Details can be found in this post. (via)
[German]Trend Micro warns of various vulnerabilities, including a remote execution vulnerability (RCE), in its security solution Trend Micro Apex One. This vulnerability in the endpoint security solution is said to be already exploited. However, Trend Micro has released an update to its software that addresses the vulnerability. Administrators using Trend Micro Apex One should update this software in a timely manner.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]The Court of Justice of the European Union issued a decision on Wednesday, September 14, 2022, regarding the fine imposed by the EU Commission on Google or its parent Alphabet. In Case T-604/18, the court largely upheld the Commission's decision that Google imposed unlawful restrictions on Android mobile device manufacturers and mobile network operators in order to strengthen the dominant position of its search engine.
[German]Phone systems from Canadian manufacturer Mitel that are used in companies are being attacked by ransomware from the Lorenz Group. Arctic Wolf Labs suspects that Lorenz Ransomware Group has exploited the CVE-2022-29499 vulnerability to compromise Mitel MiVoice Connect systems to gain initial access. After that, the system can be taken over to encrypt it and extort victims. Administrators should update the phone system software to the latest version.
[German]Microsoft has also released security updates for Windows 7 and 8.1 as well as for the Windows Server counterparts 2008 R2 and 2012/R2 on Patchday. Here is an overview of these updates for Windows 7/8.1 and the corresponding Windows Server versions 2008 R2 and 2012/R2.
[German]On September 13 (second Tuesday of the month, Patchday at Microsoft), Microsoft also released a cumulative update for Windows 11, which will be released on October 5, 2021. The update is supposed to fix various problems. In addition, Windows Server 2022 received an update. Here are some details about these updates.
[German]On September 13, 2022 (second Tuesday of the month, Patchday at Microsoft), several cumulative updates were released for the supported Windows 10 builds (from RTM version to current version) as well as for the Windows Server counterparts. Here are some details on the respective security updates.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
