BadSuccessor: Read up on the dMSA AD privilege increase issue

Posted on 2025-05-29 by guenni

Windows[German]Recently, security researchers have pointed out a potential vulnerability lurking in the delegated Managed Service Accounts (dMSAs) newly introduced in Windows Server 2025. By abusing dMSAs, attackers can take over any principal in the domain. A security researcher is critical of the fact that Microsoft is waiting with a patch. And a developer has created a .NET PoC that can be used to test the vulnerability – here is an addendum.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Serious connection issue on ports of the HP Aruba/HP 1930 switch

Posted on 2025-05-28 by guenni

Stop - Pixabay[German]I'm going to post an issue here in the blog that came to my attention recently. It concerns the HP Aruba/HP 1930 switch, where there may be connection issues. If I'm interpreting it correctly, this is probably a software error which means that devices on certain connections (ports) can't get a connection. There are now various reports about this on the Internet.

Continue reading →

Posted in devices, issue | Tagged , | Leave a comment

Windows 10/11: Preview Updates May 27, 28,2025

Posted on 2025-05-28 by guenni

Windows[German]Microsoft has released optional cumulative (preview) updates for Windows 11 22H2-23H2 (KB5058502) on April 27, 2025 and for Windows 11 24H2 (KB5058499) on April 28, 2025. There is also the preview update KB5058481 for Windows 10 22H2. These updates contain corrections that can be tested and will then be rolled out as fixes in the following month.
Continue reading →

Posted in Update, Windows | Tagged , , | Leave a comment

Windows Server 2022/Windows 10/11: Out-of-Band Updates KB5061906 / KB5061977 / KB5061979 fixes Hyper-V freezes (23./27. May 2025)

Posted on 2025-05-28 by guenni

Windows[German]Microsoft released an out-of-band update for Windows Server 2022 on May 23, 2025 to prevent the Hyper-V platform from freezing. On May 27, 2025 another out-of-band update for Windows 11 24H2 has been released to fix the same issue. And there is an out-of-band update for Windows 10 22H2. Here is a brief overview what's been documented by Microsoft.

Continue reading →

Posted in issue, Update, Virtualization, Windows | Tagged , , , , | Leave a comment

Excel can't load documents with […] in file name after May 2025 update

Posted on 2025-05-27 by guenni

[German]On May 13, 2025 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. In the meantime, I have received some reader feedback on problems. Excel can't load documents with filenames, containing leading square brackets [..].

Continue reading →

Posted in issue, Office, Security, Software, Update | Tagged , , , | 3 Comments

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

CISPE says: VMware has increased prices by 800 to 1500%

Posted on 2025-05-26 by guenni

VMware[German]The Association of European Cloud Providers, CISPE, complains that VMware by Broadcom has increased the prices of its products for customers by a factor of 800 to 1500 percent following the takeover by Broadcom. Broadcom is accused of abusing its dominant market position and welcomes the EU competition complaint from the German IT user association VOICE.

Continue reading →

Posted in General, Software, Virtualization | Tagged , | Leave a comment

The 4 most important password errors that jeopardize security

Posted on 2025-05-25 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Even if Information Technology should move towards passwordless logins (passkey & Co.), logins using a user name and password are still widespread. Just as widespread are certain mistakes when choosing passwords, which jeopardizes security. I recently received an overview from Hostinger on this topic, which I would like to briefly post here.

Continue reading →

Posted in Security | Tagged | 2 Comments

Suspected InfoStealer data leak exposes 184 million login data

Posted on 2025-05-24 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Security researcher Jeremiah Fowler came across a freely accessible and unprotected database on the Internet. The find was quite something, as a look at the data sets suggests that it was probably data collected by InfoStealer malware. Records containing 184 million logins and passwords were stored in the database.

Continue reading →

Posted in Security | Tagged | 1 Comment

Operations Endgame, DanaBot-Net and Raptor disrupt infrastructure for ransomware attacks and more

Posted on 2025-05-24 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Law enforcement officers seized 300 servers and 650 domains used for ransomware attacks this week in Operation Endgame. As a result, cybercriminal networks were dismantled, funds confiscated and some suspects arrested. Further actions against cybercriminals were carried out with the Raptor and DANABOT campaigns. Here is an overview.

Continue reading →

Posted in Security | Tagged | Leave a comment

BadSuccessor: Abusing dMSA to elevate privileges in Active Directory

Posted on 2025-05-23 by guenni

Windows[German]Delegated Managed Service Accounts (dMSAs) have been introduced in Windows Server 2025. These are service accounts for the Active Directory (AD) that are intended to enable new functions. Security researchers have now discovered that by misusing dMSAs, attackers can take over any principal in the domain.

Continue reading →

Posted in Security, Windows | Tagged , , | Leave a comment