[German]Cisco Talos security researchers have discovered that the Babuk ransomware gang is using the ProxyShell vulnerability in Microsoft Exchange to install a web shell called "China Chopper". A Babuk ransomware partner named "Tortilla" probably joined the group in October and is deploying this web shell. The ProxyShell vulnerability can be closed long ago by updates on on-premises Microsoft Exchange servers.
[German]Microsoft has again released the preparation update KB4023057 (Update for Windows Update service components) for machines with Windows 10/11 on November 5, 2021. The update is supposed to improve the reliability of the Windows Update Service, i.e. to find any update problems on the Windows 10/11 systems of private users that prevent an upgrade.
[German]Microsoft has released an unscheduled update KB5008295 for Windows 11 as of November 5, 2021. The purpose of this update is to fix the startup issues of the apps shipped with Windows 11. These apps have not been launching since November 1, 2021 because a certificate expired on October 31, 2021. This also fixes the Snipping tool that is on strike.
[German]It's November 2021, time to take a look at the state of affairs regarding the distribution of feature updates. Microsoft started updating more compatible Windows 10 machines to Windows 11 a few days ago. Further, Windows 10 21H1 is now being released to all compatible machines – and Windows 10 21H2 should be close to release. Here's a brief overview.
[German]Anyone who uses VPN providers must be able to rely on their security and integrity. Security researcher Bob Diachenko of comparitech has recently come across an unprotected database (no password) on the Internet containing more than 300 million records with the personal data of VPN users. The records have since been traded on underground forums, and the operator of a VPN service denies maintaining a database. But a week after the company was notified, the database had disappeared from the Internet. Continue reading
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Mozilla's developers have released the version 94.0.0 and 91.3.0esr of the Firefox browser on November 2, 2021. And then the 94.0.1 was immediately added to correct a bug.
[German]A small addendum for people who already use Windows 11 and are surprised that individual apps suddenly no longer work. Windows 11 is still extremely new, it was only released on October 5, 2021. But on October 31, 2021, a certificate used to digitally sign apps expired. As a result, certain apps or applications included with Windows 11 will go on strike from November 1, 2021. This can happen and Microsoft has profound workarounds.
[German]The developers of the Thunderbird email client have released Thunderbird 91.3.0 on November 3, 2021. This is a maintenance and security update for the 91 development branch, which makes minor fixes. In particular, a number of vulnerabilities rated as high have been fixed. However, the signature problem with Microsoft Outlook still exists. Here's a brief overview.
[German]Quick question for the WSUS administrators under my blog readers who may already have Windows 11 clients integrated in WSUS. Right now there is some confusion about managing Windows 11 clients in WSUS. There are reports that all clients with Windows 11 will show up in WSUS as Windows 10 (Enterprise). Then the clients cannot be provided with update via WSUS.
[German]Google is making two-factor authentication (2FA) mandatory for its Google accounts starting November 9, 2021. In May 2021, Google had announced this move in this blog post. I have been offered the 2FA protection on my Android smartphone on November 3, 2021. And I see from this article that it will be mandatory from November 9, 2021.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
