[German]Does anyone from my readers use the Okta authentication service? Once again there is a security report about this provider. Okta has just closed a login vulnerability that allowed users to log in to certain accounts with any password since July 2024. However, I suspect that the vulnerability was not exploited due to numerous conditions.
[German]I'll summarize two known bugs in Windows 10 22H2 that Microsoft documented on October 22 and 30, 2024 and fixed or at least mitigated via KIR. It's about a black screen in Azure Virtual Desktop. And it's about apps that cannot be started by standard users. Here's what Microsoft has documented so far.
Continue reading
[German]I'm running out of daisies because I've been plucking flowers "Recall is coming, Recall is not coming, Recall is coming, Recall is not coming…". Microsoft's Brandon Le Blanc admitted to The Verge that the delivery of Recall in Windows 11 will be delayed. Redmond needs more time to secure Recall.
[German]In one year, the Windows 10 operating system will no longer be supported. Companies can apply for a support extension (ESU). Microsoft has now commented on the end of support for Windows 10, is promoting the switch to Windows 11 and is making consumers an offer: for 30 US dollars, everyone will receive one year of further updates.
[German]The Mozilla developers released the Thunderbird email client as an Android app at the end of October 2024. The client allows you to manage emails and can adopt the settings of the desktop version of Thunderbird. I have written down a few impressions.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has supported IPv6 in Exchange Online for outgoing email for some time now and also prefers this for data traffic. In a Techcommunity post dated October 30, 2024, the Microsoft team has now summarized the changes to IPv6 support in Exchange Online in an update.
[German]Addendum from the October 2024 patchday (8.10.2024). The KB5044281 update for Windows Server 2022 (21H2) may cause problems with failover clusters. A reader has left a comment in the blog that the remote desktop services in his environment are being destroyed – at least in a failover cluster, as a German blog reader reported.
Continue reading
[German]International law enforcement agencies from the Netherlands, the United States, Belgium, Portugal, the United Kingdom and Australia have shut down three servers in the Netherlands and seized two domains linked to the infostealers Redline and Meta as part of Operation Magnus. In addition, charges were brought in the United States and two people were taken into custody in Belgium.
[German]Microsoft has generally released Inbound SMTP DANE with DNSSEC for Exchange Online, after it was already available as a preview in July 2024. The new Inbound SMTP DANE with DNSSEC function in Exchange Online is intended to increase the security of email communication by supporting two security standards.
[German]Old topic new revisited. Attackers can downgrade Windows kernel components and thus bypass the protection of the operating system through functions such as Driver Signature Enforcement. This allows rootkits to be used on fully patched systems. SafeBreach security researcher Alon Leviev has reported the problem to Microsoft, but they do not want to do anything about it.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
