Pitfall: Windows clients install updates past WSUS

Posted on 2022-04-11 by guenni

Windows[German]There is occasional feedback here on the German and English blogs from administrators who use WSUS to control the distribution of updates to Windows clients, and complain that clients have surprisingly pulled updates past WSUS and installed them. The cause may be a recommended group policy from Microsoft's baseline security templates. Here is some information on this issue, which a reader comment brought to my attention.

Continue reading →

Posted in issue, Update, Windows | Tagged , , , | Leave a comment

End of support for .NET Framework 4.5.2, 4.6, and 4.6.1 on April 26, 2022

Posted on 2022-04-10 by guenni

Update[German]In an announcement dated April 4, 2022, Microsoft announced the end of support for .NET Framework 4.5.2, 4.6 and 4.6.1 on April 26, 2022. After that, there will be no more (security) updates. Users running the runtime in question should update it to at least .NET Framework 4.6.2 before April 26, 2022. Nothing changes for other .NET Framework versions, including .NET Framework 3.5 SP1 (see).

Posted in Security, Software, Update | Tagged , | Leave a comment

Spring4Shell: Vulnerabilities in Java Spring Framework

Posted on 2022-04-09 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researchers from Check Point have discovered multiple vulnerabilities in the popular Java Spring Framework developer environment. The vulnerabilities are now being used for attacks, and according to Check Point, 16 percent of all organizations worldwide were affected after just four days. Immediate updating of affected products is strongly recommended.

Continue reading →

Posted in Security | Tagged | Leave a comment

Autopatch for Windows 10/11 Enterprise E3/E5 offered for July 2022

Posted on 2022-04-09 by guenni

Windows[German]In July 2022, Microsoft plans to release a new feature Autopatch for Windows 10/11 Enterprise. The paid product, Windows Autopatch, is intended to manage all aspects of delivering quality and feature updates, drivers, firmware and Microsoft 365 apps to enterprises for Windows 10 and Windows 11.

Continue reading →

Posted in Update, Windows | Tagged , , | Leave a comment

New Security Features in Windows 11: "Smart App Control" & more

Posted on 2022-04-09 by guenni

Windows[German]Microsoft has not only outlined the future roadmap in terms of Windows 365 Cloud PC integration for Windows 11 on April 5, 2022. They announced also, that new security features will be available in Windows 11. Microsoft Defender's "Smart Screen" supports a phishing protection. Furthermore, security features such as Personal Data Encryption and Smart App Control are available for corporate environments.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Cyber news April 8, 2022: Kremlin TV hacked, Microsoft overtake Strontium domains

Posted on 2022-04-08 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Today a few more news around the topic of cyber security. Hackers have penetrated in March Russian TV systems and in April the Kremlin's TV  system and seem to have hundreds of surveillance cameras under control. In addition, Microsoft has taken over seven domains that were misused by the Russian APT28 hacker group (Strontium, Fancy Bear) for attacks against facilities in Ukraine.

Continue reading →

Posted in Security | Tagged | Leave a comment

Microsoft Edge 100.0.1185.36 fixes CVE-2022-1232

Posted on 2022-04-08 by guenni

Edge[German]Microsoft has updated the Chromium Edge browser to version Edge 100.0.1185.36 as of April 7, 2022. This is a maintenance update, for which Microsoft has published little on the release notes page. Microsoft doesn't list any details on that page either  – the link to the fixed vulnerabilities is broken. Only in an email I received the information that the vulnerability CVE-2022-1232 has been fixed. The browser should be updated automatically, but can also be downloaded here.

Posted in browser, Security, Update | Tagged , , | Leave a comment

Warning: Critical Vulnerabilities in VMware Products (April 6, 2022)

Posted on 2022-04-08 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Just yesterday, in the blog post VMware patches Spring4Shell RCE vulnerability CVE-2022-22965, I warned about a vulnerability in certain VMware products. Now the manufacturer has followed up and warns about critical vulnerabilities in various VMware products. This affects Workspace ONE Access, VMware Identity Manager (vIDM), vRealize Lifecycle Manager, vRealize Automation and VMware Cloud Foundation products. Security updates to close the vulnerabilities are available.

Continue reading →

Posted in Security, Software, Update | Tagged , , | Leave a comment

Speaker Gate: Audio output distorted on the Samsung Galaxy S22

Posted on 2022-04-08 by guenni

[German]Some of the proud owners of a Samsung Galaxy S22 smartphone are facing a problem. The speakers of Samsung's flagship keep emitting unintelligible sounds, and people have to switch to a headset or earphones to understand audio output. The problem sometimes occurs after flights. The problem is bizarre, as "put the smartphone in the fridge for a few hours" or "open the SIM slot for a moment" are traded as workarounds. It seems that the problem of the speakers is caused by a lack of pressure compensation in the casing.

Continue reading →

Posted in devices, issue | Tagged , | Leave a comment

Cicada: Chinese hackers abuse the VLC player for espionage via DLL side-loading, among other things

Posted on 2022-04-07 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researchers from Symantec have tracked down a malware campaign (Cicada) that has been running for years. A Chinese state-affiliated hacker group is abusing legitimate applications such as VLC Player to inject malware into systems via DLL side-loading. The goal is to spy on the systems of victims working in government, legal, religious, and non-governmental (NGO) sectors on at least three continents.

Continue reading →

Posted in Security | Tagged , | 1 Comment