[German]There is a remote code execution vulnerability (CVE-2021-28476) in Microsoft's Hyper-V virtualization solution that allows a guest-to-host attack. Microsoft provided security updates in May 2021, so the vulnerability could be closed. Now a security researcher has published a proof of concept (PoC) for the vulnerability in vmswitch.sys.
[German]The Chinese company Alibaba offers an app called UC Browser for Android and iOS via its subsidiary UCWeb (resides in Singapore). The browser is ranked fourth in the world by the number of users. Now it has come out that the subsidiary UCWeb is pulling the browsing and search history of users who use the app. This also applies to incognito mode, and this behavior is consistent on both Android and iOS devices.
[German]Mozilla's developers have released the version 89.0.0 with the new Proton user interface and the and 78.11.0 ESR of the Firefox browser on June 1, 2021. It is a new development branch, which should eliminate vulnerabilities, but also fix bugs.
[German]Microsoft has quite annoyed some users with the release of Edge 91 because of the appearing start page bug and the displayed popups about the browser settings. However, the days users reported that the bugs were suddenly fixed as if by magic, although no updates were installed. I had guessed on a server-side fix – but in the meantime I have information how Microsoft could realize the fix without updates.
[German]On June 1, 2021 (first Tuesday of the month, Office Patchday) Microsoft releases non-security updates for still supported versions of Microsoft Office. Here's a quick overview – there was only one update each for Office 2016 and 2013 this time.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[English]Today another small blog post about Extended Security Updates support (ESU) for Windows 7 SP1 and Server 2008 R2. I encountered the problem last year. Despite a valid ESU license, my Windows 7 SP1 production system wouldn't pull updates, nothing showed up. At the end of the day there was a surprising solution.
[German]Brief warning to administrators of Microsoft Exchange servers. While investigating an attack on a major U.S. hospitality company, security firm Sophos has discovered a new ransomware called Epsilon Red. Red Epsilon exploits unpatched vulnerabilities in Microsoft Exchange servers to infect machines on the network and then encrypt files there.
[German]Three years ago, on May 25, 2018, the General Data Protection Regulation (GDPR) came into force. This meant enormous changes for many companies with regard to the storage and processing of data – although the GDPR had not introduced anything new. But now, severe penalties loom for companies that fall victim to a data protection incident. To mark this anniversary, UK market research firm Opinion Matters conducted a survey of 1,276 business decision-makers on behalf of CrowdStrike to gauge current perceptions of the regulations within companies.
[German]Recently version 91 of the Chromium Edge browser was released by Microsoft to catch up with the Chromium development version level. With Chromium Edge version 91, Microsoft has not only elevated the browser to a new development branch, but also managed to alienate people again with bugs and especially annoying pop-ups.
[German]I'm summarizing two topics that have been lying around for a while in a collective post. It's about the possibility to install drivers in Windows 10. In Windows 10, Microsoft has made an update to the device manager in the Insider Previews at the beginning of May 2021 to better manage drivers. And a blog reader contacted me by email back in March about some driver installation oddities related to WSUS and Windows 10 that he noticed.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
