[German]Connecting a Razer mouse is enough to gain administrative privileges as a standard user. The background is that the driver installation is executed with SYSTEM rights and the user can then open an administrative prompt. He already has administrative access to the system. Razer did not respond to a request from the discoverer of the vulnerability.
[German]I have been waiting for this for a long time, but now the feared has happened. Since Friday, there has been a massive wave of attacks on unpatched Microsoft Exchange servers via the ProxyShell vulnerability. Huntres has already discovered over 1,900 hacked Exchange servers but which had a shell installed. Meanwhile, CERT-Bund also warns. Here is some information about the state of attack wave.
[German]Presumably the latest security update of August 10, 2021, causes a rather exotic problem with Microsoft's Surface Studios. A blog reader pointed out, that the mouse positioning of the text cursor correctly is no longer possible in Microsoft Word 2019 because the position is shifted.
[German]There is a partial fix for a problem that users of monitors on DisplayPort 1.4 have. Some monitors (with higher resolution) stay dark (black) when booting the computer and show nothing. Only when the operating system is loaded does a display appear on the monitor at some point. It seems to be due to the hardware or the installed nVidia graphics cards. At least the manufacturer Asus has now apparently released a solution in the form of a vBIOS update for the TUF 3080 TI.
[German]It looks like the August 2021 KB5005033 cumulative update (and July preview update) is causing problems for some Windows 10 users. The functionality of the Alt-Tab key combination seems to be disrupted, especially when playing games in certain scenarios. Users who installed the preview update KB5004296 from July 2021 already had to make this experience. However, there is probably a workaround to fix the problem, because the News and Interesting Topics feature once again proves to be a "killer feature".
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Currently, some users of Windows 7 SP1 and Windows 8.1 are wondering about the updates offered by Microsoft Update Servers. Two users have contacted me who were suddenly offered ancient updates on Windows 7 and Windows 8.1 as important (thanks for that). I'll post it on the blog to find out if more users are affected. By the way, this is not the first case of such zombie updates showing up.
[German]Security vendor Emisoft has released a decryptor that enables the decryption of files encrypted by the Synack ransomware. This allows victims to recover their files without having to pay the demanded ransom from the cyber criminals. The decryptor is available for free.
[German]PrintNightmare is the name given to a series of vulnerabilities in the Windows Print Spooler service. Attackers can use these vulnerabilities to extend rights and possibly take over domain controllers. Microsoft reacts half-heartedly with patches and recommendations, which in practice are only annoying for those affected. In the meantime, these vulnerabilities are being exploited in cyber attacks, and the discoverer of the vulnerabilities is making accusations of inaction against Microsoft. Time for a look at the facts.
[German]Enterprise customers who subscribe to Microsoft 365, which consists of Windows 10 and Office 365, will have to pay more in 2022, starting March 1. Microsoft has announced a price increase of between 10 and 20 percent. The reason given is that prices have remained stable since the introduction of Microsoft Office 365 10 years ago.
[German]ecurity researchers had recently disclosed a new attack vector called PetitPotam. By means of an NTLM relay attack, any Windows domain controller can be taken over by attackers. ACROS Security has now presented the second free 0Patch solution for different Windows Server versions, which prevents the exploitation of the vulnerability.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
