Windows 10/11: Which group policies should no longer be used in patch management

Posted on 2022-01-24 by guenni

Windows[German]Today another topic for administrators of Windows systems (Windows 10 and Windows 11) to which Microsoft has commented the days. It is about group policies that can be used in these clients to manage restrictions. At one point it looks like the group policies diverge between Windows 10 and Windows 11. Also, Microsoft recently explained which Group Policies should no longer be used for updates because the conditions have changed since Windows 10 version 1507.

Continue reading →

Posted in Windows | Tagged | Leave a comment

EU Parliament approves "Digital Service Act"

Posted on 2022-01-24 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]On January 20, 2022, the EU Parliament adopted the so-called Digital Service Act in its first reading. This will make online platforms and online marketplaces more accountable and more stringent in combating illegal content, goods and services, and disinformation. The issue of cookies is also addressed in this bill. Negotiations are now beginning on implementation by the member states.

 

Continue reading →

Posted in Security | Tagged , | Leave a comment

Bitdefender Security forecasts for 2022

Posted on 2022-01-23 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The year 2021 has already hit some administrators with security incidents. The log4j issue may not be off the table yet, and 2022 started with violent tremors for administrators (key words are the year 2022 bug in Exchange, as well as the January 11, 2022 patchday issues with Microsoft Windows). Jen Easterly, head of the U.S. federal government's Cybersecurity and Infrastructure Security Agency (CISA), called the log4j vulnerability the most serious bug she has seen in her decade-long career. The effects of log4j will be felt by IT, business and society in the coming months and possibly years. So security will continue to be an issue in 2022.

Continue reading →

Posted in Security | Tagged | Leave a comment

Vulnerabilities in McAfee Agent allows privilege escalation and code execution as Windows SYSTEM

Posted on 2022-01-22 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]McAfee Agent for Windows is vulnerable to privilege escalation due to a serious vulnerability, allowing program code to execute with Windows SYSTEM privileges. The vendor has since corrected the CVE-2022-0166 vulnerability, which was introduced into products such as McAfee Endpoint Security via an OpenSSL component. The same is true for the second code injection vulnerability, CVE-2021-31854.

Continue reading →

Posted in Security, Software, Windows | Tagged , , | Leave a comment

Microsoft disables Excel 4.0 macro support by default

Posted on 2022-01-22 by guenni

[German]Good news in terms of security and Office, because Microsoft finally plugs a gateway for malware by disabling the default support for Excel 4.0 macros. This mitigates an announced and long overdue vulnerability.

Continue reading →

Posted in Office, Security | Tagged , , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

WordPress: Backdoors in AccessPress Themes and Plugins

Posted on 2022-01-22 by guenni

[German]WordPress users beware, there are again massive vulnerabilities in WordPress plugins and themes due to a supply chain attack on the provider AccessPress. In dozens of plugins and themes of this provider hackers have built backdoors to hack the sites and possibly take over data. And there is a WordPress HTML mail plugin with a vulnerability. Here is a brief overview.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Windows 10 20H2 will be upgraded to Windows 21H2 (January 20, 2022)

Posted on 2022-01-22 by guenni

Windows[German]Microsoft has adjusted its machine learning programs so that machines running Windows 10 version 20H2 are now updated more broadly and automatically to Windows version 21H2. This is Microsoft's response to the fact that support for version 20H2 is about to expire, and it wants to ensure that the machines in question run on newer builds. Here is some information on this topic.

Continue reading →

Posted in Windows | Tagged | Leave a comment

Review: Fix for Hyper-V Host Startup Problem in Windows (January 2022)

Posted on 2022-01-22 by guenni

Windows[Geman]The January 11, 2022 security updates for Windows Server 2012/R2 resulted in the Hyper-V host subsequently failing to start. As of January 17, 2022, Microsoft then released special updates to correct this issue. Here is a follow-up on this issue.

Continue reading →

Posted in Update, Virtualization, Windows | Tagged , , , , | 3 Comments

Installing Windows 10/11 in Hyper-V 2nd Generation

Posted on 2022-01-22 by guenni

Windows[German]Installing Windows 10 or Windows 11 in virtual environments can present some challenges. Depending on the hypervisor, the installation may even fail completely. Blog reader Thomas S. emailed me back in December 2021 with his experiences installing Windows 10 as well as Windows 11 under Microsoft's Hyper-V 2nd generation. I publsih his information here in the blog – maybe other readers can benefit from it.

Continue reading →

Posted in Virtualization | Tagged , , , | 1 Comment

Edge 97.0.1072.69

Posted on 2022-01-21 by guenni

Edge[German]Microsoft has updated the Chromium Edge browser to version Edge 97.0.1072.69 as of January 20, 2022 (thanks to the reader for pointing this out). This is a security update that addresses security vulnerabilities. Microsoft lists the release notes for Microsoft Edge and its security updates on this page – but it doesn't give much details. The browser should be updated automatically, but can also be downloaded here.

Posted in browser, Security, Software, Update | Tagged | Leave a comment