[German]Cybercriminals use an exploit chain to attack a patched 0-day vulnerability in the chrome browser (Edge) and an unpatched 0-day vulnerability in the Windows kernel. The vulnerability has just been disclosed by Google Project Zero.
The developers have released WordPress 5.5.2 as a security and maintenance update on October 29, 2020. In this version 14 bugs are fixed, which are described in the release notes. The update fixes a critical vulnerability that allows a remote attacker to take over a page via a denial of service attack (see also). So you should update as soon as possible – here the blogs were updated immediately after release. Addenum: On October 30, 2020 WordPress 5.5.3 has been released as a bug fix update.
[German]Short note for for administrators in enterprise environments who want to use the new Chromium-Edge Browser. Microsoft made Microsoft Edge now available as update KB4584642 for WSUS. Here are a few details.
[German]In Windows 10 20H2 some users may experiencethat the Local Security Authority Subsystem Service file (lsass.exe) crashes in certain constellations. Here is a short overview of what I have seen so far – combined with the question if there are other people affected. Addendum: Root cause known, link to a follow up article added.
[English]Microsoft released version 0.25.0 of PowerToys for Windows 10 users on October 10, 2020. These tools are free and offer additional features for Windows 10. The new version is intended to increase the stability of the tools. The new features and fixes of PowerToys 0.25.0 are documented on GitHub.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
Microsoft has also released the Windows 10 Insider Preview Build 19042.610 (20H2) for Windows Insider in Beta and Release Preview Channels as of October 29, 2020. This build is shipped as Update KB4580364, as you can read within announcement made in the Windows-Blog. Microsoft fixed an issue that causes the Docker pull operation to fail. This issue occurs because of a Code Integrity (CI) Policy that blocks the import of a Windows container image.
Microsoft has released the Windows 10 Insider Preview Build 20246 for Windows Insider in the Developer Channel as of October 29, 2020. The announcement was made in the Windows-Blog, where the list of new features, fixes and known issues can be found. According to the announcement this is the first build in the FE_RELEASE branch (do not refer to any specific development branch).
[German]Administrators (or users) who have installed the October 2020 updates (for Windows 10 and Windows Server pendants) are probably facing issues. ConfigMgr and other tools will (possibly) not be able to download files for Microsoft Office 365 updates afterwards. The reason is a certificate error already described here in the blog, and confirmed by Microsoft. Here is some information about it.
[German]If updates are managed with WSUS under Windows Server 2012 R2, there may be synchronization issues problems on some systems since July 1, 2020 due to disabled TLS 1.0/1.1 support. But there is a workaround: Use a downgrade of TLS support.
[German]Microsoft has released the cumulative update KB4580364 for Windows 10 Version 2004 and 20H2 on October 29, 2020. This update had been tested with Windows insiders for one week (see Windows 10 20H2/2004: Update KB4580364 (19042.608) released for Insider)).
MVP:
2013 – 2016
WIMVP:
2017 – 2020
