[German]It was already announced September 2021 that the Basic Authentication in Exchange Online will be deactivated. The cutoff date for this disablement to begin is October 1, 2022. As of May 3, 2022, Microsoft has now reiterated this cutoff date, writing that in approximately 150 days we will begin disabling Basic Authentication for certain protocols in Exchange Online for those customers still using it.
[German]Brief information for administrators of a Sophos Intercept X endpoint solution. The vendor seems to be informing its customers about a serious problem. After a fresh installation of Sophos Intercept X Endpoint for Windows or an update, sus.sophosupd.com is no longer accessible, but reports an HTTP Error 403. In the meantime, Sophos has published a corresponding advisory (KB-000043980 dated May 6, 2022) about this problem. Here is some information about this issue.
[German]Yesterday, May 5, was "World Password Day" – and from this point of view, the announcement of the FIDO Alliance to make the Internet more secure and usable for everyone is only logical. The FIDO Alliance and the World Wide Web Consortium have developed a procedure for password-free user logon. Apple, Google and Microsoft, with the FIDO Alliance on May 5, 2022, have now announced plans to expand support for a common standard for passwordless logins that builds on the FIDO solution. The new feature is intended to enable websites and applications to offer consistent, secure and simple passwordless logins to users across all devices and platforms. Microsoft plans to release certain features as early as May and June 2022 for Windows and Microsoft Authenticator.
[German]Network switches from Aruba and Avaya are vulnerable to RCE attacks due to 5 vulnerabilities. Security researchers from Armis, a company specializing in networked devices, who discovered the vulnerabilities call them "TLStorm 2.0" – because there was already the TLStorm case (I had published this article TLStorm: 3 critical 0-day vulnerabilities put APC Smart UPS at risk on the original discovery of the TLStorm vulnerability in smart UPS units).
[German]Google has released the Google Chrome 101.0.4951.54 update for Windows and Mac on the desktop in the Stable Channel as of May 2, 2022 (see Chrome 101.0.4951.54 fixes GPO bug). This build does fix the Group Policy issue (see comments on the post Chrome 101.0.4951.41 fixes 30 Vulnerabilities – but has a GPO bug). But version 101.0.4951.54 has a problem with some certificates. Users got an ERR_CERTIFICATE_TRANSPARENCY_REQUIRE visiting some web sites. In the meantime, however, this error should be fixed now.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Security researchers at Sentinel One have discovered two serious vulnerabilities in Avast and AVG's security products that have been around for 10 years and put millions of users at risk. The vulnerabilities are in Avast's anti-rootkit driver (which is also used by AVG). Attackers can use the vulnerabilities to take over the Windows system.
[German]On May 3, 2022 (first Tuesday of the month), Microsoft releases non-security updates for still-supported versions of Microsoft Office. This month, however, there are only updates for Microsoft Office 2016, which fixes issues in Access 2016, among others. Here is a short overview.
[German]The developers of the Thunderbird email client have released Thunderbird 91.9.0 as of May 3, 2022. This is a maintenance update for the 91 development branch. Thanks to Tom for pointing this out.
[German]The preview update KB5012643 for Windows 11, released on April 25, 2022, turns out to be a real problem bear. First there were display problems in Safe Mode, which had to be corrected by KIR. Now it turns out that the preview update also causes problems with .NET Framework 3.5 applications. Microsoft has also confirmed this in the meantime and tried to give hints on how the update can still be uninstalled.
[German]Google has released the Google Chrome 101.0.4951.54 update for Windows and Mac on the desktop in the Stable Channel as of May 2, 2022. This version fixes the Group Policy issue (see post Chrome 101.0.4951.41 fixes 30 Vulnerabilities – but has a GPO bug). The post in question can be found on the Google blog. The Chrome version for Windows, Mac and Linux will be rolled out to systems via the automatic update feature in the next few days. One can also update the browser manually (via the menu and the About Google Chrome command). The latest build of the Chrome browser can also be downloaded here.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
