[German]Mozilla developers have released versions 102.0.1 of the Firefox browser on July 6, 2022. This is a maintenance update that is supposed to fix bugs.
Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Firefox 102.0.1 released
Windows 10: Barco ClickShare breaks start menu, OneDrive, Outlook and Store apps
[German]Today another finding from the internet about Windows 10 (11) troubleshooting, where the error was caused by an app. Suddenly the Windows Start menu stopped working, OneDrive reported an error, and Outlook was also causing problems. At the end of the day Rudy Ooms found the culprit, it was the app ClickShare from Barco. I found it quite interesting how Ooms investigated and documented the whole thing and am posting the short version here on the blog for your information.
OpenSSL 3.0.4 Vulnerability CVE-2022-2274: Heap Memory Corruption with RSA Private Key Operation
[German]A vulnerability CVE-2022-2274 exists in OpenSSL that could lead to heap memory corruption with RSA private key operations. It affects OpenSSL 3.0.4 and the vulnerability is rated High in severity. A second vulnerability CVE-2022-2097 causes AES OCB to fail to encrypt some bytes. This vulnerability is rated Moderate.
Microsoft Office Updates (July 5, 2022)
[German]As of July 5, 2022 (first Tuesday of the month), Microsoft has released non-security updates for versions of Microsoft Office that are still supported. This month, however, there are only updates for Microsoft Office 2016, again fixing Access issues and bugs in SharePoint 2010. Here is a brief overview.
Office 365 version 2206.15330.20196: Excel bug prevents display of cell contents (OP396850)
[German]Users who have upgraded Microsoft Office 365 as a Click-2-Run variant to version 2206.15330.20196 (released June 29, 2022) report a strange bug. In Microsoft Excel, the contents of cells (rows and/or columns)in a spreadsheet are no longer displayed, but are overlaid in white. Currently only the rollback to a previous version remains. Microsoft already knows about this bug and has documented it under OP396850 in the status area.
Why ISL Online: Critical factors when choosing a remote desktop solution
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Windows Server 2012 / R2 and the (upcoming) Azure AD Connect Sync issue as of Aug. 31, 2022
[German]Microsoft had recently pointed out the end of support for Windows Server 2012 / R2 (from October 2023). Seemingly still plenty of time to replace this server version, especially since there will still be purchasable Extended Security Update support (ESU) until 2026. But as of August 31, 2022, the danger lurks that Azure AD Connect Sync will no longer work. Anyone still running Windows Server 2012 / R2 in this environment needs to take immediate action.
AstraLocker terminates activities and releases Decryptor
[German]Strange things are happening at the moment. The threat actor behind the lesser-known AstraLocker ransomware seems to want to stop its activities. The actor plans to switch to cryptojacking and has published an archive of AstraLocker decryption programs. I'll try to summarize the facts I know, although much is unclear, even though the actor has probably also contacted my English-language blog.
Chrome 103.0.5060.114 fixes 4 vulnerabilities
[German]Google has released the Google Chrome 103.0.5060.114 update for Windows on the desktop in the stable channel as of July 4, 2022. The security update closes 4 vulnerabilities that are rated as high. For Android, there is version 103.0.5060.7.
Hacker sells 1 billion personal data from Shanghai police data base for 10 bitcoins
[German]US media report that a hacker is currently trying to sell a 23 terabyte data set for the price of 10 bitcoins (around 195,000 euros). The dataset is said to contain 1 billion personal data of the population from a police database of the Chinese city of Shanghai.
AstraLocker 2.0: Infection via Word attachment
[German]Security researchers from ReversingLabs have tracked down a relatively unknown malware, which they have named AstraLocker. In version 2.0, the attackers have taken to loading the malicious payload directly from a Word document that is included as an attachment to a mail. This is unusual in that cyber attackers usually try to disguise the attack. Security researchers believe the group has limited cyber-attack capabilities, but gears its campaigns toward destruction.