[German]On June 10, 2025, Microsoft also patched the vulnerability CVE-2025-33073 with the security updates for Windows. This is a vulnerability in the Kerberos network protocol that was discovered by RedTeam Pentesting in January 2025. Below I disclose some information about the vulnerability that I received in advance from the discoverers. There are also notes for Windows administrators on what is relevant.
[English]On June 10, 2025 (second Tuesday of the month, Patchday at Microsoft) various cumulative updates were released for the supported versions of Windows Server. Below I have extracted the provided updates including some details for these Windows Server versions (from Windows Server 2012 to 2025).
[German]On June 10 (second Tuesday of the month, Patchday at Microsoft), Microsoft released cumulative updates for the still supported client operating system versions of Windows 10 and Windows 11. Here are some details about these updates, which are intended to fix vulnerabilities and problems.
[German]Microsoft released security updates for Windows clients and servers, Office and other products on June 10, 2025. The security updates eliminate 65 vulnerabilities (CVEs), two of which were classified as 0-day. One vulnerability has already been attacked. The following is a compact overview of the updates released on Patchday
[German]Acronis Cyber Protect security vulnerabilities endanger Windows systemsShort note for users who use Acronis Cyber Protect in a Windows environment. There is a current security warning from the German Federal Office for Information Security (BSI). Several vulnerabilities in the product have become known that jeopardize the security of Windows.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On June 11, 2025, Microsoft will hold its regular patch day and release security updates for Windows. Administrators in companies should install the security updates promptly this time, as a vulnerability CVE-2025-33073 in Windows is to be closed. At the weekend, information was already circulating warning of the vulnerability. Let me summarize some preliminary information that I can disclose.
[German]In addition to the issue just mentioned in the article Bug in Office 365 v2505? Mails are lost in cached mode, there is another inconsistency that a user has pointed out to me: Non explainable appointment or meeting cancellations in the calendar of the new Outlook from Microsoft Office. The question arises: "What's going on? Is it an isolated case or something faulty in the new Outlook?" Continue reading
[German]Microsoft has already provided an update on the topic of "unlicensed OneDrive accounts" on June 6, 2025 and reminded users of the deadlines. According to Microsoft, unlicensed OneDrive accounts will be archived or deleted after 93 days. Administrators must act to recover data if necessary.
[German]Does anyone use software from ConnectWise (e.g. ScreenConnect)? This evening I received an email from a blog reader pointing out an announcement from ConnectWise that is quite urgent. By tomorrow, June 10, 2025, 15:00 CET, users must update the provider's software as the manufacturer is replacing the digital server certificates. There are fears that an attacker could misuse an old digital certificate. Addendum: There is a new date of June 13, 2025.
[German]Brief information for users who may have used the free option of Microsoft's Power Automate for their own purposes. I have just noticed that Microsoft is no longer providing this automation solution for private users. Anyone who still has flows and data stored there will have to back them up in July 2025 or switch to alternative solutions. Here is a brief summary of the situation.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
