[German]We have to push ahead with digitization, they sey. We hear less about security, but they say also that data is the new oil. A hacker took this literally and penetrated the IT network of the Argentine government. He was then able to access the identity card data of the country's entire population from RENAPER (Registro Nacional de las Personas) and stole data. He is now selling the data to private circles.
[German]As part of the October 2021 patchday wrap-up, I'd like to bring up a second topic in addition to the post Microsoft confirms Windows network printing issue after October 2021 updates. Microsoft has announced that the smartcard authentication issue with remote desktop connections has been fixed with the October 2021 updates via a rollback. At the same time, I've seen reports here on the blog that the October 2021 security update for Windows 10 will break YubiKey authentication, which should also be fixed.
[German]Since the release of the October 12, 2021 security updates, administrators have been complaining about network printing issues. Administrative permissions are required for every print operation – I had reported. Now Microsoft has confirmed this issue, but released the whole thing for Windows 11, although it affects Windows 7 through Windows 11 and the server counterparts.
[German]The Irish data protection authority DPC has sent the data protection organization noyb, founded by Max Schrems in Austria, a so-called take down notice. This is a request to take down a published document from the organization's website. The document is about a draft decision of the DPC, in which a trick used by Facebook is to be legalized. The DPC classifies this draft as confidential, but noyb sees it differently.
[German]The REvil cyber-gang seems to have completely stopped its activities again since they recently resurfaced from obscurity. The background for the renewed exit is probably the fact that individual Tor nodes have probably been taken over. Thus, the REvil cyber gang once again remains in the headlines, after it recently became known that the gang also ripped off and booted out its own partners.
[German]It looks like Windows Defender can be bypassed, allowing malware to evade the sandbox and access the operating system. A piece of information just came to my attention where a security researcher outlines this exact scenario for Windows 11. Here's what I've seen so far.
[German]A brief message for people who host ASP applications at the provider smarterasp.net. I have just been informed from Belgium by a user that there is a serious disruption there and it was asked if they were victims of a cyber attack. Currently it seems to only affect customers in Europe, as I saw from a quick research. Here is a rough outline of what is known on the subject.
[German]Microsoft does not support Windows 11 on Mac OS on their M1 processors and demands TPM 2.0 for virtual machines as well. Now the manufacturer Parallels has reacted and provides Parallels Desktop 17.1. This virtualization software also supports virtual TPM 2.0, so Windows 11 should be supported in this environment.
[German]A class action lawsuit has been filed in the USA against the device manufacturer Canon, which has come up with a very perfidious scam. If the multifunction devices run out of ink, operation is stopped. One user was so upset by this that he filed a lawsuit.
[German]I think the developers at Apple and Microsoft – as well as some other software companies – will have their work cut out for them. At the Chinese Tianfu Cup 2021, which is currently (Oct. 16./17. 2021) underway, there was a continuous stream of successful hacks. Among other things, Microsoft Exchange 2019 was hacked via a 0-day exploit – and even the iPhone with iOS 15 was not safe from the hackers.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
