[German]At the end of May, in the post Vulnerability CVE-2021-21985 in vSphere Client, patch it! I had reported about a CVE-2021-21985 vulnerability in VMware vSphere client and called for patching. Now, not only has a proof of concept (PoC) become public. Attackers are also scanning the Internet for unpatched VMware vCenter Server instances.
[German]Security vendor Tenable has uncovered several security-related issues affecting macOS application installers at once. One of these problems is the possibility to bypass macOS' standard security mechanisms regarding signed application installers. These are actually supposed to prevent the execution of malicious scripts. Tenable also warned all application developers of a potential vulnerability to watch out for when creating installers for their applications. These vulnerabilities have not yet been fixed, Tenable said in a recent announcement.
[German]Since April 2021, there is an issue that updates have broken Windows Server Backup or diskpart on Windows Server 2012 R2. Trying to mount virtual hard disks (VHDs) ends with error messages. Uninstalling the update KB5001382 solves the problem. It seems to be a Synology related issue. A fix is supposed to be coming, but there is a workaround.
[German]The developers of the Thunderbird email client have released Thunderbird 78.11.0 on June 1, 2021. It is a maintenance update for the 78 main version of the email client, which fixes various bugs.
[German]It has long been known that there will be another Windows 10 upgrade in the fall of 2021. Even Microsoft's boss, Satya Nadella, recently talked about a "Next Windows". On June 24, 2021, Microsoft now officially invites to an event that will be about the next Windows. Here is some information on the topic.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]There is a remote code execution vulnerability (CVE-2021-28476) in Microsoft's Hyper-V virtualization solution that allows a guest-to-host attack. Microsoft provided security updates in May 2021, so the vulnerability could be closed. Now a security researcher has published a proof of concept (PoC) for the vulnerability in vmswitch.sys.
[German]The Chinese company Alibaba offers an app called UC Browser for Android and iOS via its subsidiary UCWeb (resides in Singapore). The browser is ranked fourth in the world by the number of users. Now it has come out that the subsidiary UCWeb is pulling the browsing and search history of users who use the app. This also applies to incognito mode, and this behavior is consistent on both Android and iOS devices.
[German]Mozilla's developers have released the version 89.0.0 with the new Proton user interface and the and 78.11.0 ESR of the Firefox browser on June 1, 2021. It is a new development branch, which should eliminate vulnerabilities, but also fix bugs.
[German]Microsoft has quite annoyed some users with the release of Edge 91 because of the appearing start page bug and the displayed popups about the browser settings. However, the days users reported that the bugs were suddenly fixed as if by magic, although no updates were installed. I had guessed on a server-side fix – but in the meantime I have information how Microsoft could realize the fix without updates.
[German]On June 1, 2021 (first Tuesday of the month, Office Patchday) Microsoft releases non-security updates for still supported versions of Microsoft Office. Here's a quick overview – there was only one update each for Office 2016 and 2013 this time.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
