Social networks
Awards
MVP:
2013 – 2016
WIMVP:
2017 – 2020
Tag Archives: Cloud
Reminder: Remote PowerShell on Exchange Online will be disabled
[German]Small reminder for administrators who maintain Microsoft's Exchange Online and still work with Remote PowerShell (RPS). In the meantime, Microsoft has deactivated RPS for new instances and this function can no longer be activated. In a few weeks, support for … Continue reading
Microsoft has fixed Azure vulnerability faster (in August 2023) after Tenable criticism
[German]Microsoft surprisingly fixed a vulnerability in the Azure environment as reported of Aufugst 4, 2023, with a patch originally scheduled for end of September 2023. Microsoft has been aware of the vulnerability since March 2023. The harsh criticism of the … Continue reading
Allegedly malicious notifications from teams through Defender ZAP
[German]I would like to ask the administrators among the readership if anyone else is experiencing the effect mentioned here. An administrator contacted me because he has been getting reports of supposedly corrupt notifications from Teams for days. In use is … Continue reading
Microsoft as a Security Risk? Azure vulnerability unpatched since March 2023, heavy criticism from Tenable – Part 2
[German]Security vendor Tenable has made serious accusations against Microsoft. A critical vulnerability in Azure Active Directory (AAD, recently EntraID) has been known since March 2023, but has not yet been patched. The CEO of security vendor Tenable, Amit Yoran, sharply … Continue reading
Microsoft as a Security Risk? U.S. senator calls for Microsoft to be held accountable over Azure cloud hack- Part 1
[German]Is Microsoft and its handling of vulnerabilities in its products now the "top cyber risk"? The hack of Microsoft Azure services by the suspected Chinese group Storm-0558, made possible by a stolen private MSA key, seems to have been the … Continue reading
Microsoft has published the TokenTheft playbook
[German]Small note to administrators who are responsible for or manage services and applications in the (Microsoft) cloud. The theft of tokens can enable attackers to access the corresponding services. As a result of a corresponding incident, Microsoft has therefore published … Continue reading
SharePoint Online outage on July 25, 2023 due to incorrect TLS certificate
[German]On July 24, 2023, there was a brief outage of SharePoint Online and OneDrive for Business. After two hours, Microsoft informed us that the problem was related to an update and had already been corrected. In the meantime, it has … Continue reading
VMs running Windows Server Datacenter 2022 on Azure with Desktop Experience: Hotpatching available
[German]One more quick piece of information for administrators who manage Windows Server 2022 Datacenter virtual machines on Microsoft Azure with Desktop Experience. Microsoft has just announced that hotpatching is now available for these machines.
Stolen AAD key allowed (Storm-0558) wide-ranging access to Microsoft cloud services
[German]Microsoft had to admit on begin of July 2023 that suspected Chinese hackers from the Storm-0558 group were able to forge security tokens using a stolen private MSA key. Then then gain broad access to Microsoft cloud services, as Wiz … Continue reading
Microsoft365 Backup and Microsoft 365 Archive introduced
[German]As part of this week's Inspire 2023 partner conference, Microsoft also unveiled two new data backup products. With Microsoft365Backup and Microsoft 365 Archive, administrators should be able to back up data from Microsoft products such as OneDrive, SharePoint or Exchange … Continue reading