[German]As expected, Microsoft has released security updates for Exchange Server 2013, Exchange Server 2016 and Exchange Server 2019 on April 13, 2021 (Patchday). These are intended to close vulnerabilities found that were reported by security companies. Prompt installation is recommended – though feedback on bugs has yet to be received. Here is some information about these updates.
[German]On April 13, 2021, Microsoft released security updates for Windows clients and servers, for Office, etc. – as well as for Microsoft Exchange – have been released. Below is a compact overview of these updates.
If you observe Facebook's WhatsApp from a view or a data protection activist or a security expert, you should have dropped that messenger (I dumped that thing in 2018 due to GDPR reasons). During the past WhatsApp has a steady stream of huge security issues. I just link here to the Forbes article Why You Should Quit WhatsApp As Critical New Update Confirmed from March 6, 2021. Now we have the next nail in the coffin: Forbes has uncovered a nasty new surprise for WhatsApp's 2 billion users today. Security researchers has discovered an alarming security risk. Knowing a phone numer is suffizient, to allow a remote attacker to deactivate easily WhatsApp on a phone and then stop users getting back in. Even two-factor authentication will not stop this. Details may be read within this Forbes article.
[German]As of April 13, 2021, Microsoft will remove Legacy Edge from newer Windows 10 builds. Could there be any problems? Another issue is the effect that Internet Explorer is immediately redirected to the new Edge at startup. In an omnibus post, I take up some of these issues around Edge.
[German]Ok, I think I got your attention with the headline. From what I heard, next Tuesday there will be some updates for Exchange Server. Why? Because three Exchange exploits were presented at the hacker conference Pwd2Own (6-8.4-2021). Maybe it would be a good idea to make sure that the Exchange servers are patched over the weekend to be able to start with updates in time.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]The developers of the Thunderbird email client have released Thunderbird 78.9.1 on April 8, 2021. It is a maintenance update for the 78 main version of the email client, which fixes various bugs and vulnerabilities.
[German]Just a short information for WSUS admins. The sync problem in WSUS that I reported on 7.4.2021 (see WSUS/MECM: No sync since April, 7, 2021) has been fixed. Readers had already reported in comments that the synchronization works again. The confirmation about the cause, it was indeed Visual Studio, and that it was fixed is now available from the product team (is added in the linked article).
[German]In Part 1 I had analyzed the information Lösung Malware-Angriff Smartphones released by the company Gigaset on April 8, 2021 with regard to the automatic deletion of the malware infection of various Android devices. This works, according to previous feedback, for some people, but it is not really reliable. Now, Gigaset has additionally published instructions on how to clean the devices manually. Here's a look at that issue, as well as a listing of issues that aren't addressed at all in the Gigaset information.
[German]Smartphone vendor Gigaset published a document names Lösung Malware-Angriff Smartphones on April 8, 2021, that should help to cleas Android phones infected by malware since April 1, 2021. In the following text, I will compile and comment the information given from Gigaset and supplement it with my own findings, enriched with the many questions that remain unanswered here. After that, every owner of Gigaset devices should decide how to proceed.
[German]Short note or question to the administrators of a Windows Server Update Service (WSUS): Does the synchronization work for you? There are reports, that sync (at MECM) is failing since yesterday.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
