[German]On August 9, 2022 (second Tuesday of the month, Patchday at Microsoft), several cumulative updates were released for the supported Windows 10 builds (from RTM version to the current version). Here are some details about each security update.
[German]On August 9, 2022, Microsoft released security updates for Windows clients and servers, for Office, etc. – as well as for other products – were released. The security updates also eliminate 118 vulnerabilities, 17 of which are critical and two 0-day vulnerabilities. Below is a compact overview of these updates released on patchday.
[German]On Monday, August 8, 2022, the Danish supermarket chain 7-Eleven has fallen victim to a cyberattack. As a result of this cyberattack, the chain had to close all 175 stores in Denmark on August 8, 2022. On Thuesday, August 9, 2022, some stores are reopened.
[German]The developers of Thunderbird have released another update to the email client on August 9, 2022 (just hours after the previous version). It withdraws a feature to show progress when retrieving pop mails.
[German]Microsoft has informed its users of Windows 10, Windows 11 and various Windows Server versions about a new bug introduced via update. One is affected when one suddenly cannot open XPS documents anymore if these documents have characters outside the English language range. However, I wonder how many users really use XPS documents.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Windows systems (Windows 11, Windows Server 2022) that uses CPUs with support of latest Vector Advanced Encryption Standard (AES) (VAES) command set may be vulnerable to data corruption. That's the simple message Microsoft released to its user base on August 8, 2022. All Windows 11 systems as well as Windows Server 2022 seem to be affected.
[German]In advance of the August 2022 patchday on 8/9/2022, another quick note for administrators responsible for Windows Server 2019 (or LTSC versions of Windows 10 Enterprise 1909). There is still little on the internet – but feedback in my blogs suggests that the July 12, 2022 security update KB5015811 is responsible for various issues with Exchange, SCCM and with PowerShell scripts.
[German]Users of a printer from the Japanese manufacturer Epson might experience an unpleasant surprise. On certain devices, a message suddenly appears that a "part in the device" has reached the end of its life. The printer still works, but is deactivated by firmware. For Epson, the reason for the message and the deactivation is the built-in ink sponge, which is full. The deactivation of the printer is probably to prevent ink from leaking out and then causing damage to the customer due to printer ink. The problem with this approach is that it smells of planned obsolescence, since the deactivation of the device is probably done via firmware and based on a counter for the number of printouts.
Numerous vulnerabilities also lurk in the cloud, and administrators of cloud solutions should address the issue. But where can you get an overview of security risks or even vulnerabilities in relation to the various cloud providers? There is an Open Cloud project, which started at the end of June 2022 and aims to make security vulnerabilities in cloud services public.
[German]On its VirusTotal service, Google receives numerous daily submissions of files to check if they are malware. In a new report, "Deception at scale: How malware abuses trust," a team from Google has compiled findings on various techniques malware uses to bypass defenses and make social engineering attacks more effective. This should help security researchers, security professionals and the general public better understand the nature of malicious attacks.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
