[German]Today, another short post for administrators who are using Microsoft Defender Application Control (WDAC) in a Windows 10 Enterprise environment or on Windows 11 Enterprise or Windows Server counterparts from 2016 to 2022 and are annoyed by unwanted restarts. These unwanted restarts are caused by a policy setting, as one MVP found out. I'll post the information here on the blog, maybe it will help.
[German]There is always a discussion about how quickly or how slowly vulnerabilities are patched by developers. Google's Project Zero has therefore taken a look at how quickly security vulnerabilities are closed in Linux or in products from Microsoft (Windows) and Apple (macOS). It is about vulnerabilities reported by Project Zero to the manufacturers/developers between 2019 and 2021. The result: Linux developers are patching by far the fastest.
[German]Brief note for people dealing with security cameras from vendor Axis. A German blog reader informed me, that the website of this vendor is currently down. There seems to be massive technical issues causing a major outage. Whether it is the result of a cyber attack, or just the technology, I can not currently answer. Means that customers (banks, supermarkets, etc.) can no longer access their security cameras remotely because the cloud is down. Here is some information. Addendum: It looks like a cyberattack – because after my inquiry on Twitter, there is a new reference to an "IT-related intrusion" on the status page – see addendum in the text. Addendum 1: It's was a cyberattack that has taken place.
[English]Microsoft offers the possibility to reset a system with Windows 10 or Windows 11 to factory settings locally or remotely (via Intune). There is also the option to remove the user files. This is desirable if a machine is perhaps to be passed on to another user. MVP Rudy Ooms has now discovered that resetting Windows including removing the user files does not work under Windows 10 and Windows 11 in version 21H2. Addendum: Note about OneDrive client als a root cause added. Addendum 2: The issue has been confirmed by Microsoft.
[German]The vendor zebNet has discovered a critical vulnerability in various products that allow a man-in-the-middle attack (MITM) in the update process of the affected application. The night I was then contacted by the manufacturer by mail and asked to publish the whole thing here in the blog. The background: Informing customers about the vulnerability is proving difficult.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Cisco has released security updates this week to close a highly classified vulnerability (CVE-2022-20653) in its email security appliances. Attackers were able to crash the e-mail security appliances via prepared e-mails and thus virtually launch a DoS attack. Affects Cisco AsyncOS software versions 14.0, 13.5, 13.0, 12.5 and older on Cisco ESA devices when DANE is enabled.
[German]Interesting findings from a survey of 1,100 security specialists as part of a study with regard to the security of industrial systems and critical infrastructure in Europe. The message of the study was that industrial control systems and operating technology in Europe were attacked by ransomware almost as frequently as IT systems. One in two victims experienced significant disruption as a result of these attacks.
[German]Microsoft is once again experimenting a lot with the online requirement for upcoming Windows versions. The cat was let out of the bag in the Insider Preview of Windows 11: An Internet connection is mandatory for installation in the OOBE phase. And only Microsoft accounts are then provided for setting up user accounts. By the way, this refers to the Windows 11 Pro variants. This means that scenarios that have been feared time and again are slowly becoming reality.
[German]On February 17, 2022, Mozilla developers released version 97.0.1 as a maintenance update of the Firefox browser to correct various bugs.
[German]Der Sicherheitsanbieter Trend Micro hat zum 15.2.2022 das Update 2390 für seine Worry Free Business Security (WFBS) freigegeben. Der Patch aktualisiert den Apache Web-Server auf Version 2.4.5 und behebt diverse Problemein der Virenschutzlösung. Um diesen Patch zu installieren, muss genügend freier Festplattenspeicher (13 GByte oder mehr) auf dem Systemlaufwerk vorhanden sein.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
