[German]Hope for victims of REvil/Sodinokibi ransomware attacks who have lost access to encrypted data. Security vendor Bitdefender has succeeded in developing a universal REvil decryptor in cooperation with law enforcement agencies. The REvil Decryptor helps with all files that were encrypted by July 13, 2021. The tool is available free of charge.
[German]Microsoft has announced a new Office 2021 (as well as an LTSC version) for the 2nd half of 2021. The LTSC version of Microsoft Office is available now. The Office 2021 version, on the other hand, is scheduled for release to business customers and consumers on October 5, 2021. Here is some information about these products.
[German]The vulnerability CVE-2021-40444 in the Windows MSHTML library has been known public since September 7, 2021. Actors attempt to attack Windows machines via this vulnerability using manipulated Office files. As of September 14, 2021, Microsoft has addressed the vulnerability in Windows security updates. In addition, I have new analysis on the vulnerability. As a follow-up to Patch day, here is a summary of the current state of affairs.
[German]For months, a number of vulnerabilities in the Windows Print Spooler service, which are summarized under the term PrintNightmare, have existed in all Windows versions. Microsoft has been trying to close the vulnerabilities completely since July 2021 to no avail. New problems occur after every patch. At patchday on September 14, 2021, there was another PrintNightmare fix, but it poses problems again. Here is a brief overview of the state – we can say: For some users it's a new desaster, because the printer won't work after update.
[German]Microsoft now supports passwordless logins to Microsoft accounts. The company announced this in a blog post on September 15, 2021. This should make it possible to log in to Windows, Office or other Microsoft services via the Authenticator app without entering a password. Microsoft wants to increase the security of the systems with this step.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On September 14, 2021 (second Tuesday of the month, Microsoft Patchday), Microsoft has released several security-related updates for still supported Microsoft Office versions and other products. Here is an overview of the available updates.
[German]Microsoft will hold its Ignite 2021 conference from November 2 to 4, 2021. Microsoft Ignite is an annual conference for developers and IT experts. Because of the coronavirus pandemic, everything takes place as a digital online event, and access is free. Registration is now open.
[German]Adobe has released a security update for Adobe Acrobat (Reader) DC to version 21.005.20091 on September 14, 2021, which is intended to patch vulnerabilities considered critical and important according to APSB21-55. The release notes contain the download addresses for the Windows and macOS installers, as well as notes on what (important) bugs have been fixed. (via)
[German]Those responsible for Linux VMs under Microsoft Azure need to react immediately. Management agents have been silently installed, that have RCE and LPE vulnerabilities. The vulnerability, called OMIGOD, must be patched manually because there is no Azure update mechanism.
[German]On September 14, Microsoft has released various updates for Windows 7 SP1 systems that are still in ESU support. Also with ESU Bypass v11 the whole thing still works. But these security updates are also available for Windows Server 2008 R2 with ESU support. Here is some information about the Monthly Rollup and Security only Updates for this operating system.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
