[GER]I'm posting some information here on the blog that I received from Google in mid-May 2025. Google Cloud has announced that it is expanding its Risk Protection Program (RPP) to over 30 EMEA markets (including DACH). The program is about cyber insurance, where two new partners Chubb (headquartered in Zurich) and Beazley have been acquired.
Microsoft has also updated the recovery updates KB5060534, KB5060532, KB5060530, and KB5060529 for Windows 10 as of June 10, 2025. The updates are required for recovering or reinstalling Windows 10 installations. The patches are also available for download in the Microsoft Update CatalogDetails on the updates can be found in the linked support articles. (via)
[German]On October 14, 2025, Microsoft Windows 10 22H2 will receive security updates for the last time and will then no longer be supported. But there are options to at least secure the operating system. Apart from this issue, other Microsoft products such as the Universal Apps, OneNote for Windows 10, Microsoft Office 2016 and 2019, and Exchange Server 2016 and 2019 will also receive security updates. Here is a brief look at these issues.
[German]Quick warning to administrators who are still managing a Surface Hub v1 as a large screen. The update KB5060533 from June 10, 2025 for Windows 10 21H2-22H2 causes boot problems. But the primary root cause has been removed by Microsoft on June 11, 2025 – a fix is still outstanding.
[German]Security researchers have discovered the first zero-click vulnerability in an AI application. Unsurprisingly for me, this concerns Microsoft 365 Copilot. Attackers could use this vulnerability, known as EchoLeak, to force Microsoft 365 Copilot to exfiltrate data.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]I received reports in comments of my German blog, that users of Fujitsu systems are ending with bricked devices during installing the June 2025 security updates for Windows. Die Rechner starten nicht mal mehr ins BIOS/UEFI. Ursache ist wohl eine Aktualisierung der DBX-Records für den Secure Boot durch die Windows Updates. Lässt sich nur mit Tricks wieder korrigieren.
[German]The June 2025 security updates for Microsoft Office fixes critical vulnerabilities, but appear to cause serious problems for some users in corporate environments. Document files can no longer be opened in the Office applications. There are also reports of crashes and problems with Microsoft Outlook Classic. Addendum: Outlook crashes have been confirmed by Microsoft, there is a workaround.
[German]Brief addendum from June 10/11, 2025 – Microsoft fell a little short on Patchday (June 10) with its Windows 11 24H2 update KB5060842. Its installation caused problems for some users. The update was therefore withdrawn and the out-of-band update KB5063060 was pushed late in the evening on June 11, 2025.
[German]On June 10, 2025 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. This month, serious vulnerabilities in Office were closed. Below you will find an overview of the available updates.
[German]On June 10, 2025, Microsoft also patched the vulnerability CVE-2025-33073 with the security updates for Windows. This is a vulnerability in the Kerberos network protocol that was discovered by RedTeam Pentesting in January 2025. Below I disclose some information about the vulnerability that I received in advance from the discoverers. There are also notes for Windows administrators on what is relevant.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
