[German]On April 13, 2021, Microsoft released security updates for Windows clients and servers, for Office, etc. – as well as for Microsoft Exchange – have been released. Below is a compact overview of these updates.
If you observe Facebook's WhatsApp from a view or a data protection activist or a security expert, you should have dropped that messenger (I dumped that thing in 2018 due to GDPR reasons). During the past WhatsApp has a steady stream of huge security issues. I just link here to the Forbes article Why You Should Quit WhatsApp As Critical New Update Confirmed from March 6, 2021. Now we have the next nail in the coffin: Forbes has uncovered a nasty new surprise for WhatsApp's 2 billion users today. Security researchers has discovered an alarming security risk. Knowing a phone numer is suffizient, to allow a remote attacker to deactivate easily WhatsApp on a phone and then stop users getting back in. Even two-factor authentication will not stop this. Details may be read within this Forbes article.
[German]As of April 13, 2021, Microsoft will remove Legacy Edge from newer Windows 10 builds. Could there be any problems? Another issue is the effect that Internet Explorer is immediately redirected to the new Edge at startup. In an omnibus post, I take up some of these issues around Edge.
[German]Ok, I think I got your attention with the headline. From what I heard, next Tuesday there will be some updates for Exchange Server. Why? Because three Exchange exploits were presented at the hacker conference Pwd2Own (6-8.4-2021). Maybe it would be a good idea to make sure that the Exchange servers are patched over the weekend to be able to start with updates in time.
[German]The developers of the Thunderbird email client have released Thunderbird 78.9.1 on April 8, 2021. It is a maintenance update for the 78 main version of the email client, which fixes various bugs and vulnerabilities.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Just a short information for WSUS admins. The sync problem in WSUS that I reported on 7.4.2021 (see WSUS/MECM: No sync since April, 7, 2021) has been fixed. Readers had already reported in comments that the synchronization works again. The confirmation about the cause, it was indeed Visual Studio, and that it was fixed is now available from the product team (is added in the linked article).
[German]In Part 1 I had analyzed the information Lösung Malware-Angriff Smartphones released by the company Gigaset on April 8, 2021 with regard to the automatic deletion of the malware infection of various Android devices. This works, according to previous feedback, for some people, but it is not really reliable. Now, Gigaset has additionally published instructions on how to clean the devices manually. Here's a look at that issue, as well as a listing of issues that aren't addressed at all in the Gigaset information.
[German]Smartphone vendor Gigaset published a document names Lösung Malware-Angriff Smartphones on April 8, 2021, that should help to cleas Android phones infected by malware since April 1, 2021. In the following text, I will compile and comment the information given from Gigaset and supplement it with my own findings, enriched with the many questions that remain unanswered here. After that, every owner of Gigaset devices should decide how to proceed.
[German]Short note or question to the administrators of a Windows Server Update Service (WSUS): Does the synchronization work for you? There are reports, that sync (at MECM) is failing since yesterday.
[German]Microsoft sent a short Microsoft Security Advisory Notification around last night, again pointing out the March 2021 updated servicing stack update Microsoft Security Advisory Notification.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
