[English]Redmond has added security information to the latest version of the Microsoft Support Emergency Response Tool (MSERT). The tool can now be run to detect and eliminate the latest Exchange Server threats. Specifically, the tool finds installed Web shells in Exchange instances.
[German]The Hafnium hacker group has probably managed to compromise hundreds of thousands of Exchange installations worldwide via vulnerabilities. A patch to close the vulnerabilities is available, but it may be too late. However, tools are now available from Microsoft and third parties to check Exchange instances for signs of the hack.
[German]A little shortie for the weekend. In Windows 10 there is the option to log processes or the loading of DLLs and drivers. The option can be turned on via the Code Integrity policy.
[German]Brief information for administrators of Microsoft Exchange servers who have yet to install the March 2021 security update. The security update released this week by Microsoft for Microsoft on-premise Exchange servers (2010 to 2019) is indeed intended to close four vulnerabilities used for attacks. The update has caused malfunctions in one case (ECP stops running and OWA search goes on strike). I am posting the information for administrators here on the blog to help troubleshoot for those affected.
[German]Microsoft warns, that installing the March 2021 cumulative security updates for Exchange servers need to be done with administrative privileges. Otherwise the patch will not close the vulnerabilities. In addition, German BSI (Federal Office for Information Security) warns that thousands of Exchange servers are accessible via the Internet and are probably already infected. Addendum: It's suspected, that at least 30,000 organizations across the United States have been hacked during the last few days.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has released the update to Edge 89.0.774.45 on March 4, 2021. It is a new development branch, with this version fixing various vulnerabilities that have already been fixed in Google Chrome. Here is some information about it.
[German]Unpleasant story – the servers of the service provider for airlines, SITA (cooperates with IATA), were hacked. Customer data of air travelers of Star Allicance (among others United) got into the hands of hackers. Singapore Airlines and other airlines have informed customers.
[German]In Firefox 86, the Mozilla developers have changed the print dialog and adapted it in the direction of Chrome. However, you can reactivate the system print dialog available in earlier Firefox versions if needed. In the article I take a look at some questions about the print dialog in Firefox 86.
[German]Google has already released Google Chrome 89.0.4389.72 on March 2, 2021. The browser should be updated promptly because Google is closing an actively exploited 0-day vulnerability (the 2nd in 2021).
[German]Today, a few more topics are summarized in a collective article. For a week now, there has been a rumor that Microsoft will soon be coming around the corner with a "New Windows". And the next version 21H1 of Windows 10 has already been rolled out to many machines without users suspecting it. In addition, Windows Server 2022 has been released as a preview.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
