Tag Archives: Windows

Microsoft's new Store app installer with telemetry wrapper as a security trap

Posted on 2024-04-24 by guenni

[German]I just reported how the Store team has started repackaging Store apps. An executable .NET wrapper is slapped around the store apps, which smuggles telemetry and other code into the app. This is intended to simplify the installation of store … Continue reading →

Posted in Security, Windows | Tagged , , | Leave a comment
Advertising

Windows print spooler vulnerability CVE-2022-38028 preferred attack vector for Russian attackers

Posted on 2024-04-23 by guenni

[German]The old print spooler vulnerability CVE-2022-38028 in Windows is probably the preferred target of the Russian hacker group Fancy Bear. This was revealed by Microsoft's analysis of an attack tool ('GooseEgg' malware). However, this attack vector can no longer be … Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

Microsoft packs Store apps with telemetry wrapper

Posted on 2024-04-22 by guenni

[German]The move from Microsoft, which has just been uncovered and is causing anger among developers. Their Store team has started to secretly repackage Store apps. The apps are provided with an executable .NET wrapper that adds telemetry and other code … Continue reading →

Posted in Windows | Tagged , , | Leave a comment
Advertising

Windows Server 2012 / R2 and Windows 7 (April 9, 2024)

Posted on 2024-04-10 by guenni

[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on April 9, 2024. Support for Windows 7 SP1 and Windows Server 2008 R2 expired in January 2024. However, updates for Windows Embedded Standard 7 can be downloaded … Continue reading →

Posted in Security, Update, Windows | Tagged , , , | Leave a comment

Microsoft Security Update Summary (April 9, 2024)

Posted on 2024-04-10 by guenni

[German]On April 9, 2024, Microsoft released security updates for Windows clients and servers, Office and other products. The security updates address 147 vulnerabilities (CVEs), including three critical vulnerabilities. Below is a compact overview of these updates that were released on … Continue reading →

Posted in Office, Security, Software, Update, Windows | Tagged , , , , | Leave a comment
Advertising

Windows NTLM credentials vulnerability CVE-2024-21320: Fix from 0patch

Posted on 2024-04-04 by guenni

[German]There is a vulnerability in Windows (CVE-2024-21320) that exposes NTLM credentials about Windows topics. Microsoft patched the vulnerability CVE-2024-21320 in January 2024. This patch provides a policy to prevent the exposure of NTLM credentials when theme files are located on … Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment

Deprecated: Test Base, special TLS authentication certificates, Visual Studio App Center

Posted on 2024-03-16 by guenni

[English]Another brief information: Microsoft has announced the discontinuation of Visual Studio App Center this week. Furthermore, features such as Test Base (Azure) and TLS server authentication certificates with less than 2048 bits were classified as "deprecated" and discontinued for March … Continue reading →

Posted in Software, Windows | Tagged , | Leave a comment

Update on Windows handening in 2024/2025 – March 2024

Posted on 2024-03-15 by guenni

[German]A quick note for administrators in corporate environments. Microsoft carries out so-called hardening measures for Windows (clients and servers) over longer periods of time. This involves hardening (securing) functions via Windows Update on certain key dates. Some of these hardening … Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment
Advertising

Microsoft Security Update Summary (March 12, 2024)

Posted on 2024-03-12 by guenni

[German]On March 12, 2024, Microsoft released security updates for Windows clients and servers, for Office – and for other products. The security updates eliminate 73 vulnerabilities (CVEs), two of which are 0-day vulnerabilities that are already being exploited. Below is … Continue reading →

Posted in Office, Security, Software, Update, Windows | Tagged , , , , | Leave a comment

Microsoft closes exploited Windows 0-day vulnerability CVE-2024-21338 six months after notification

Posted on 2024-03-03 by guenni

[German]In February 2024, Microsoft closed the vulnerability CVE-2024-21338 in the kernel of Windows 10/11 and various Windows Server versions. Great! The flaw in the story: The vulnerability was reported by AVAST in August 2023, and the vulnerability was exploited as … Continue reading →

Posted in Security, Update, Windows | Tagged , , | Leave a comment