[German]US Vendor SolarWinds, hacked in 2020 and allowing attackers to infiltrate thousands of customer systems via Orion software, has now closed a 0-day vulnerability in Serv-U with an update. The remote execution vulnerability CVE-2021-35211, which occurs in the file transfer functions, has already been exploited in the wild.
[German]It has been speculated for quite some time that Microsoft is working on a so-called cloud PC (see Is Microsoft planning a 'Windows 10 Cloud-PC' for 2021?). However, a launch in spring 2021 has definitely not taken place and Microsoft has not announced anything like that yet. It is rumored that it is a service that is provided from the cloud on 'dumb clients' . In the last few days, more information on this topic has surfaced, which I would like to briefly summarize in a post.
[German]Adobe is releasing a security update for Adobe Acrobat (Reader) DC to version 21.005.20058 on July 13, 2021, which is intended to patch vulnerabilities considered critical and important according to APSB21-51.The release notes contain the download addresses for the Windows and macOS installers, as well as notes on what (important) bugs have been fixed. (via)
[German]A brief note for administrators of a Microsoft Exchange Server 2016/2019. With CU21 (Exchange 2016) and CU10 (Exchange 2019) an AMSI integration was introduced to support third-party virus scanners. However, this integration causes severe problems with Outlook with various antivirus scanners.
[German]ACROS Security has released an update for its 0patch agent. The purpose of this update to version 21.05.05.10500 is to fix several bugs as well as performance issues that the previous 0patch agent can cause under Windows. The bugs and problems were reported by users or found internally by the development team.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Today another blog post from the category "Windows 10, the mysterious update experience". A blog reader recently drew my attention to a new "upgrade experience" (that's what Microsoft calls it). The Experience is described quite quickly: The unsuspecting user receives a prompt to install a feature update and then ends up with an unbootable system because no boot media was found. At the same time, the "system-reserved" partition was suddenly given a drive letter. Maybe a single case.
[German]A little news to end the week, which would not have occurred to me if Microsoft had not made it public. On 9 Jul9 2021, Microsoft proudly announced that its Windows Release Health status page is now available in 10 languages. On the status page in question, Microsoft provides information about known issues with Windows 10 versions, as well as issues that have been fixed.
[German]Interesting aspect I stumbled upon recently. It's about the question of how Internet of Things (IoT) devices threaten IT security. Because in addition to often serious vulnerabilities in their firmware as well as lack of updates after a short time, there is another problem area. Many devices have built-in WLAN or Bluetooth chips without users being made aware of this when they are sold. The next security issue is emerging.
[German]The team of maintainers of Linux Mint have just announced the availability of Mint 20.2. Linux Mint 20.2 (Uma) is a Long-Term Support release that will be supported until 2025. It comes with updated software and brings refinements and many new features to make your desktop experience more convenient..
[German]At the beginning of July 2021, there was a supply chain attack on Kaseya VSA, a remote management and monitoring (RMM) software, so malware was delivered. As a result, the REvil Ransomware group's encryption Trojan struck, encrypting the IT systems of approximately 1,500 companies worldwide. Gradually, more details are becoming known. For example, the vulnerability exploited for the attack was reported to Kaseya in April 2021 – and a vulnerability known since 2015 is still open in their management software.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
