[German]The first wave of mass hacking of vulnerable Exchange servers before the release of patches raises questions. Especially since the exploit code used was very similar to a PoC that Microsoft had distributed to partners a week earlier. Microsoft is now investigating whether some leak could be responsible.
[German]Google published a proof of concept (PoC) this week on how the Specte vulnerability can be exploited via JavaScript in the Chrome browser. Hence, some information and a little gimmick on how to test it.
[German]The Exchange mass hacking by the Hafnium group as well as the issue around ProxyLogon vulnerabilities won't let us off the hook. To wrap up the week, here's a quick roundup: there are revisions from Microsoft on the topic (the last set of updates for unsupported CUs on Exchange Server has been released), there are publicly available proof of concept (PoC) samples, and the "issues list" for the Microsoft Support Emergency Response Tool (MSERT) is getting longer.
[German]Adobe has released an optional update to version 21.001.20145 for Adobe Acrobat DC and Reader DC, effective March 10, 2021. Only one bug has been fixed: Comments are missing from the shared review when done with Reader DC. The update is available for Windows and macOS. Thanks to Martin E. and Michael P. for pointing this out. Martin notes that for the first time a 64 bit Adobe Reader MSP is included. He writes that he just has no idea how to install it. Because so far he has not found a 64 bit baseline installation to the 64 bit Adobe Reader DC and the MSP.
[German]As of March 9, 2021, Microsoft has released various updates for Windows 8.1. However, these updates are also available for Windows Server 2012 R2. Here is some information about them.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]On March 9, 2021 (second Tuesday of the month, Microsoft Patchday), Microsoft has released several security-related updates for still supported Microsoft Office versions and other products. Here is an overview of the available updates.
[German]Microsoft has now confirmed the printing problems (partly BlueScreens) after installing the March 2021 security updates for Windows and is working on re-releases. In addition, there are some hints from blog readers on how they got the systems working again.
[German]On March 9, 2021, Microsoft has released various (security) updates for Windows 7 SP1 (ESU) and Windows Server 2008 R2. Here is an overview of these updates – somewhat delayed due to the printer issue.
[German]Another short addendum to the never-ending topic of Proxylogon vulnerability and hafnium mass hack. Microsoft has released new updates for old CUs. Around 10 hacker groups are now trying to exploit the vulnerabilities in unpatched Exchange servers, and the list of known victims is getting longer.
[German]Beware, there are initial reports here on the blog that cumulative updates KB5000802 and KB5000808 from March 9, 2021 for Windows 10 (1909 – 20H2) is causing BlueScreen in win32kfull.sys when printing.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
