[German]Microsoft has released its onclick Microsoft Exchange (On-Premises) Mitigation Tool (EOMT) as of March 15, 2021. The tool is intended to provide a one-click solution to mitigate the CVE-2021-26855 chess vulnerability on on-premises Exchange Server installations and is primarily intended for administrators in smaller companies to have something in hand in the first place.
[German]The worldwide disruption in Microsoft's Azure Active Directory on March 15,/16, 2021 has affected many services. Among others, backup solutions that rely on Microsoft services provided by Azure AD for authentication have likely failed. This includes Veeam Office 365 backups. There is also a cumulative update KB4124 for Veeam Backup for Microsoft Office 365 5b.
[German]If you are experiencing an error message "xxxx cannot open or save any other documents ..:" when opening an Office document with Office apps from the Store on Windows 10 2004 or 20H2, this is a bug caused by a February 2021 preview update. Microsoft has documented the issue and also fixed it.
[German]Microsoft has just released an out-of-band update for Windows 10 that should fix the blue screens triggered by the March 2021 security updates when printing to various devices. Here is an overview about the updates just released. Addendum: The out-of-band updates didn't fixes all printing issues.
[German]What can I do as an Exchange Server administrator in light of the ongoing waves of attacks on ProxyLogon vulnerabilities? What do I need to be aware of? How do I find out if instances are already compromised? The repository is intended to provide guidance for Exchange administrators to quickly get to the most important information.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Google developers have updated the Chrome browser to version 89.0.4389.90 as of March 12, 20201in the desktop version for Linux, macOS and Windows. This security update fixes a 0-day vulnerability in the older browser versions. And the browser is supposed to get a new version every four weeks.
[German]Microsoft confirmed last Friday (US time) the BSOD issues triggered with the March 2021 patchday in Windows that systems with certain printers crash via BlueScreen, with more details, and a workaround was suggested.
[German]The first wave of mass hacking of vulnerable Exchange servers before the release of patches raises questions. Especially since the exploit code used was very similar to a PoC that Microsoft had distributed to partners a week earlier. Microsoft is now investigating whether some leak could be responsible.
[German]Google published a proof of concept (PoC) this week on how the Specte vulnerability can be exploited via JavaScript in the Chrome browser. Hence, some information and a little gimmick on how to test it.
[German]The Exchange mass hacking by the Hafnium group as well as the issue around ProxyLogon vulnerabilities won't let us off the hook. To wrap up the week, here's a quick roundup: there are revisions from Microsoft on the topic (the last set of updates for unsupported CUs on Exchange Server has been released), there are publicly available proof of concept (PoC) samples, and the "issues list" for the Microsoft Support Emergency Response Tool (MSERT) is getting longer.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
