[German]At the end of March 2025, Microsoft announced that Microsoft Entra ID will no longer support service principal-less authentication from March 2026. Microsoft Entra ID will then block authentication for multi-tenant applications that do not have an enterprise application registration in the resource tenant.
[German]A small addendum on the subject of Android security. Some time ago, cheap Android smartphones were once again found with the Triada malware pre-installed. The Remote Access Trojan (RAT) extracts personal data. The campaign mainly affected Russian victims, as Kasperski announced. In addition, a stalker ware app was found that requires a password for uninstallation.
[German]In future, Microsoft will specify new requirements for sending bulk emails in Outlook. For domains that send more than 5,000 emails per day, Outlook will soon require compliance with SPF, DKIM and DMARC. Non-compliant messages will initially be sent to junk. If the issues remain unresolved, they may eventually be rejected.
[German]A vulnerability in WhatsApp for Windows (before version 2.2450.6) puts Windows computers at risk. The vulnerability could allow attackers to execute malicious code via WhatsApp message attachments on Windows.
[German]Quick reminder for administrators, in case anyone hasn't noticed. On the April 2025 patchday (8.4.2025), the "enforcement phase" for the hardening of the Kerberos protocol regarding the Kerberos PAC Validation Protocol came into force. This removed certain modes that could still be activated via registry.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]In my view, there is currently some confusion regarding the announcement by VMWare by Broadcom that products such as VMware vSphere Enterprise Plus, VMware vSphere Standard (VVS), VMware vSphere Foundation (VVF) and VMware Cloud Foundation (VCF) will in future require at least "72 cores for licensing" when ordering. This requirement has probably been withdrawn.
[German]The April 8, 2025 patch day has caused some collateral damage to Outlook, Excel and Word 2016. Some Windows users are also complaining that logging in via Windows Hello no longer works after installing the April 8, 2025 updates on Windows 11 24H2 and Windows Server 2025. Here is a brief overview of this problem and a workaround.
[German]There is a use-after-free vulnerability CVE-2025-29824 in Windows, which has probably already been exploited by ransomware groups. Microsoft has released security updates for April 2025 that also close this vulnerability. Users and administrators should therefore install the April 2025 updates for Windows promptly to secure their systems.
[German]Small addendum from the April 2025 patchday (April 8, 2025) – due to all the bugs, I haven't gotten around to reporting another (cosmetic) error yet. In Windows 10 (2019 and 22H2) and Windows 11 (23H2 and 24H2), an empty "inetpub" folder is suddenly created when April 2025 security updates are installed. That's for security measures.
[German]Microsoft had already pointed out in December 2023 that the Microsoft Teams client is subject to the Modern Lifecycle Policy. This policy requires that the latest version of the client application is always used. Clients older than 90 days without an update are blocked. Microsoft has now revealed details about this and has activated this policy.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
