[German]Hack the cybercriminals seems to be the motto. The Onion website of the LockBit ransomware group appears to have been successfully attacked. The attackers captured the LockBit database with sensitive information about the group's operations.
[German]The April 2025 security updates for Windows Server may cause problems with domain controllers so that Kerberos event IDs 45 and 21 are logged. Microsoft has confirmed this problem and writes that logging in with Windows Hello in Key Trust mode can fail. Private users are probably not affected by these problems, because they don't use Domain Controllers.
[German]A short warning to blog readers who use the iVentoy tool to distribute operating system images via a network and a PXE server. There is currently a discussion that the tool (currently version 1.0.2) installs an insecure kernel driver and an obscure certificate under Windows. As long as this point has not been properly clarified, I can only advise you to "keep your hands off this tool". Addendum: The developer has already reacted and released version 1.0.21.
[German]The security update KB5055528 from April 8, 2025 for Windows 11 23H2 may prevent the upgrade to Windows 11 24H2. When the feature update is rolled out via WSUS, the download already fails with error 0x80240069 and the upgrade cannot be completed. Microsoft has now mitigated the problem with a Known Issue Rollback (KIR).
[German]For some time, users of Windows 10 22H2 were confronted with the problem that the jump lists for apps in the Start menu no longer worked. The cause was Microsoft's integration of account control into the Start menu. Redmond has now corrected this bug on the server side so that the problem is automatically fixed for users.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Short addendum from the end of last week. Microsoft has generally released Windows 11 24H2 and is rolling out this operating system version to all systems that are classified as compatible. This means that more systems will now automatically be offered the upgrade to this Windows 11 version.
[German]A short note for administrators who distribute updates for Microsoft Defender via WSUS or ConfigMgr (MECM ). There was probably a problem at Microsoft, so that the update distribution has stalled since May 2, 2025, although updates are available from Microsoft for the Defender. However, the issue has been fixed, updates should now be synced again.
[German]Quick reminder for users of Microsoft's Skype service. Microsoft is discontinuing its Skype service today, May 5, 2025. Users with remaining credit will be able to make calls using the dial pad. Skype users should delete the app or application for security reasons.
[German]It has recently become known that remote desktop connections (RDP access) can also use old, revoked passwords from the cache for connections. Some people see this as a security risk. Microsoft has been informed by the security researcher, who discoved this behavior. However, Microsoft does not want to change this situation.
Continue reading
[German]The vendor of remote maintenance software, AnyDesk, now also wants to convert existing customers to an "updated license model" when the old licenses expire. This is being sold as "exciting news" about being able to grow with the company. At the moment, I can't really tell what the catch is for existing customers. I'll pass on the information I received from a reader here in the blog.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
