[German]Folks, it's midsummer, today is the longest day of the year (at least the part that is illuminated by the sun). On the other hand, it's getting quite zap-dark at Microsoft Office 365 right now. Customers who want to check their email via this Microsoft cloud service are running into problems today, June 21, 2022, since about 10:00 am. SharePoint also seems to be affected by the cloud disruption.
[German]QNAP system owners are currently under fire from two ransomware groups. Once, cases of infections with the eCh0raix ransomware were detected. This is where drives are encrypted. In addition, QNAP has recently published a security notice that warns against attacks of the DeadBold ransomware on outdated versions of QTS 4.x.
[German]Microsoft has released an unscheduled update for Windows 11 as of June 20, 2022. The sole purpose is to fix the sign-in issues with Azure AD and Microsoft 365 services on Windows 11 described here on the blog in the post Sign-in issues with Azure AD and Microsoft 365 services since June 2022 update. It's important to note that this fix only applies to devices with ARM processors.
[German]After the release of the June 2022 security updates, there are increased reports that they are affecting remote desktop connections on Windows. The connection breaks down after a short time and seems to affect the entire network stack. The problem affects various Windows versions. At least the June 2022 updates have fixed the problem of RDP gateway roles disappearing.
[German]VMware has released two security updates for ESXi 7.0 and for ESXi 6.7 as of June 14, 2022. Blog reader Singlethreaded pointed out these security updates in a comment. In addition to ESXi, vCenterServer & Application running VMware 6.7 are also affected.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]A critical vulnerability CVE-2022-20825 exists in the RV110W, RV130, RV130W and RV215W small business routers, which has been assigned a CVE score of 9.8. Due to a lack of authentication, the vulnerability allows for remote command execution as well as denial of service attacks. The problem: The devices have fallen out of support for Cisco and no longer receive any security updates.
[German]According to a report from the Russian news agency TASS, users in Russia no longer seem to be able to download IS0 files of Windows 10 and Windows 11 from Microsoft servers. The download only works with a VPN connection. It is currently unclear whether this is a technical problem or whether Microsoft (or a third party) has deliberately blocked these downloads and removed them from the download servers accessible from Russia.
[German]The release of Microsoft Edge 102.0.1245.30 causes startup problems for some users, which are not fixed even in the successor versions, according to my knowledge. A blog reader has probably found the cause – it may be due to the "Hardware enforced stack protection" option, which causes problems on systems with AMD CPU. However, I also have reports that Intel machines are affected.
[German]It is quite explosive: Bytedance, the Chinese owner of the video platform TikTok, has always claimed that data from US users is not transferred to China. Ex-US President Trump had forced Bytedance to keep the TikTok data on US servers. Leaked audio files of 80 internal TikTok meetings now show that US user data was repeatedly accessed from China. So the concerns of the U.S. security authorities were probably not without merit.
[German]You occasionally hear "we are migrating to the cloud, to Microsoft Azure, Office 365, etc., Microsoft will make sure that patching is done and vulnerabilities are closed promptly". But cloud users are, for better or worse, dependent on Microsoft's goodwill and capabilities. And in terms of timely patching of vulnerabilities, things sometimes look bleak, as a recent case on the Synapse Pwnalytics vulnerability shows, which I'll rehash here.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
