Audio files from TikTok meeting show U.S. user data accessed from China

Sicherheit (Pexels, allgemeine Nutzung)[German]It is quite explosive: Bytedance, the Chinese owner of the video platform TikTok, has always claimed that data from US users is not transferred to China. Ex-US President Trump had forced Bytedance to keep the TikTok data on US servers. Leaked audio files of 80 internal TikTok meetings now show that US user data was repeatedly accessed from China. So the concerns of the U.S. security authorities were probably not without merit.

Continue reading

Posted in Security | Tagged | Leave a comment

Accusation: Microsoft patches Azure (Synapse Pwnalytics vulnerability) too slowly and endangers cloud security

Sicherheit (Pexels, allgemeine Nutzung)[German]You occasionally hear "we are migrating to the cloud, to Microsoft Azure, Office 365, etc., Microsoft will make sure that patching is done and vulnerabilities are closed promptly". But cloud users are, for better or worse, dependent on Microsoft's goodwill and capabilities. And in terms of timely patching of vulnerabilities, things sometimes look bleak, as a recent case on the Synapse Pwnalytics vulnerability shows, which I'll rehash here.

Continue reading

Posted in Cloud, Security | Tagged , , | Leave a comment

Outlook: Login error since the last June 2022 update

[German]I just got a user information on my desk that there are problems with the user login in Microsoft Outlook "since the last update" (probably from June 2022). Problem seems to be that the program can no longer distinguish between two online accounts. Here is the information I have so far.

Continue reading

Posted in issue, Office | Tagged , | Leave a comment

Citrix Fix for broken MS Teams call in VDA

Citrix has provided a fix for the issue in that MS Teams calls do not work in its VDA environment. Users are unable to complete a call from Microsoft Teams.

Continue reading

Posted in issue, Software | Tagged , | Leave a comment

Microsoft Security Update Revisions (June 14, 2022)

[German]One more quick piece of info from this week's post. Microsoft has released some security description revisions as of June 14, 2022, which I'll just post here on the blog.

Continue reading

Posted in Security | Tagged | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...


Sign-in issues with Azure AD and Microsoft 365 services since June 2022 update

[German]Microsoft is investigating another issue related to the June 2022 updates. It is said to affect Windows clients running on the ARM platform. On these devices, logging in to certain services is no longer possible after installing the June 14, 2022 security updates. This may also affect OneDrive, Microsoft Teams and Outlook.com.

Continue reading

Posted in issue, Windows | Tagged , , , | Leave a comment

Russian RSOCKS botnet taken down in international operation

Sicherheit (Pexels, allgemeine Nutzung)[German]In a joint action of international investigators, the Russian RSOCKS botnet was dismantled. Authorities from the United States, Germany, the Netherlands, and the United Kingdom were involved in the operation. This bot network was rented to cybercriminals for years at prices ranging from $30 to $200 per day to launch cyberattacks and phishing waves on targets around the world.

Continue reading

Posted in Security | Tagged | Leave a comment

Microsoft account: Password cannot be changed …

[German]There are mixed opinions about the Microsoft accounts required for online services and Windows. If there are problems with the account, the user is locked out, especially if the account has been deactivated. Now a reader told me about a new case where he can't change the password because the confirmation mail is delivered too late.

Continue reading

Posted in Cloud, General, Windows | Tagged , , | Leave a comment

June 2022 Patchday issues (part 2): RDP, VPN, WLAN, hotspot connection and more

Windows[German]The security updates released on June 14, 2022, closed numerous vulnerabilitiesholes. But there are also a number of issues, for example with VMs and when using ESET security solutions. I had given a first review in the blog post June 2022 patch day review: Windows update issues, Intel vulnerability, documentation fails. But there are more problems, for example in the area of wifi, VPN, hotspot or with Outlook links. Here is some information on the topic.

Continue reading

Posted in issue, Office, Update, Windows | Tagged , , , , | 6 Comments

Potentially more than 770 million Travis CI API logs compromised

Sicherheit (Pexels, allgemeine Nutzung)[German]Travis CI is a very popular service among software developers, which is used to create and test many software projects. The service is part of the software supply chain of many software solutions. Moreover, Travis CI's credentials and login information are linked to popular cloud providers such as GitHub, AWS, Docker Hub, and many others. Team Nautilus, Aqua Security's research unit specializing in the cloud-native technology stack, has now discovered a vulnerability in the free version of the Travis CI API. 

Continue reading

Posted in Security | Tagged , | Leave a comment