[German]NTLM relaying is a popular attack method used by threat actors to compromise identity. Microsoft wants to put a stop to this and has started to roll out protective measures in Windows to provide better protection against standard NTLM relay attacks.
[German]Users have been reporting for months that the desktop background "Windows Spotlight" is unintentionally activated by rolled out cumulative updates in Windows 10 22H2. Happened again in December 2024 with the KB5048652 update. Here is some information and a note on how administrators can prevent this if necessary.
[German]A few days ago, I warned in the blog post Massive wave of attacks on Citrix Netscaler gateways since 5, and 6, Dec. 2024? about a massive wave of attempted attacks on Citrix Netscaler gateways since around Dec. 5, 2024. Now the German Federal Office for Information Security (BSI) – the German CERT-Bund – is also warning of attacks on Citrix Netscaler gateways.
[German]Recall was withdrawn by Microsoft in summer 2024 due to serious security flaws. Now Microsoft is in the process of rolling out its "and really secure" version of Recall, which has been revised over months, to Windows Insiders again. What could possibly go wrong? Testers were surprised to discover that the new Recall is a nightmare. Despite the appropriate setting, confidential documents with credit card data etc. are also recorded. Oh what a surprise …
[German]Small addendum from this week – Microsoft has started rolling out its Copilot for Windows Insiders. This can be seen in an announcement dated December 10, 2024. Copilot can be downloaded as a native app from the Microsoft Store. Microsoft is thus kicking the previous Progressive Web App (PWA).
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Brief information for users of Microsoft's Skype service. Previously, it was possible to book Skype Credit with Microsoft to make calls to mobile or landline numbers. Now it looks like this option is dying and users will only be able to book monthly subscriptions for such calls.
[German]Recently a blog reader left a comment within this blog, dealing with an issue in Windows 11 24H2 combined with Microsoft Outlook and Exchange. He noticed that user accounts in the Active Directory are being blocked suddenly on a recurring basis? Searching the web, it seems it's not an isolated case. But I got an explanation and a fix from a German blog reader.
[German]On December 10, 2024 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for Microsoft Office 2016, as well as the C2R variants (Office 2016-2021 and 365) and other products. Below you will find an overview of the available updates.
[German]Various security updates for Windows Server 2012 and Windows Server 2012 R2 were released on December 10, 2024. However, these updates are only available for systems with an ESU license (1st year). Here is an overview of these updates for Windows Server 2012 and Windows Server 2012 R2.
[German]On December 10, 2024 (second Tuesday of the month, patch day at Microsoft), Microsoft also released cumulative updates for Windows 11 22H2 to 24H2. Windows Server 2022 – Windows Server 2025 also received updates. Here are some details about these updates, which are intended to fix vulnerabilities and problems.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
