Microsoft 365 apps say farewell to Internet Explorer 11 and Windows 10 sunsets Microsoft Edge Legacy

“Today, we’re announcing that Microsoft 365 apps and services will no longer support Internet Explorer 11 (IE 11) by this time next year.

• Beginning November 30, 2020, the Microsoft Teams web app will no longer support IE 11.
• Beginning August 17, 2021, the remaining Microsoft 365 apps and services will no longer support IE 11.

This means that after the above dates, customers will have a degraded experience or will be unable to connect to Microsoft 365 apps and services on IE 11. For degraded experiences, new Microsoft 365 features will not be available or certain features may cease to work when accessing the app or service via IE 11. While we know this change will be difficult for some customers, we believe that customers will get the most out of Microsoft 365 when using the new Microsoft Edge. We are committed to helping make this transition as smooth as possible.”

Security Mailer Volume 20 Number 29

• Adobe security bulletins and updates
• Apple security bulletins and updates
• Browsers-Mozilla updates Thunderbird
• Cisco security bulletins and updates
• Linux updates and patches
• Microsoft
  • Patches 17 year old DNS server vulnerability
  • Tuesday patches and updates
  • security bulletin revisions
  • security advisories
• General Security review of last weeks’ vulnerabilities

Windows 10, version 2004 and Windows Server, version 2004 Known Issues

Microsoft to soon reveal Universal Print, a cloud-based print infrastructure service that eliminates Print Servers

“All large organizations require Print Servers which connects printers to client computers over a network. Print Servers manages the jobs initiated by users based on the printer availability. Microsoft is now working on a new service called Universal Print that will eliminate the need for Print Servers. Universal Print is a cloud-based print infrastructure that will enable great print experiences for both users and IT departments. Universal Print can be deployed on Azure and will be available to business and educational organizations of any size.”

Looks like it may depend on Azure…

Security Mailer Volume 19 Number 52

• Linux updates & patches;
• General Security review of last weeks vulnerabilities

HAPPY NEW YEAR!!

Microsoft Releases Security Advisory for Windows Hello for Business

Microsoft has released a Security Advisory to address an issue in Windows Hello for Business (WHfB). An attacker could exploit this issue on devices that were affected by CVE-2017-15361, also known as Return of Coppersmith’s Attack (ROCA), to take control of an affected system.

Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

– THANKS TO BRIAN KREBS

“n Nov. 23, one of the cybercrime underground’s largest bazaars for buying and selling stolen payment card data announced the immediate availability of some four million freshly-hacked debit and credit cards. KrebsOnSecurity has learned this latest batch of cards was siphoned from four different compromised restaurant chains that are most prevalent across the midwest and eastern United States.”

I haven’t heard of anyone else reporting this, but just in case, here’s what happened:

I installed the   November Cumulative Update (KB4524570)  followed by Feature update to Windows 10, version 1909 shortly after 1909 was available (yeah, I’m a “bleeding edge” kind of guy!). Both were installed with no apparent issues.

It was only after I first tried to load TT 2019 that problems popped up. I would get the startup logo, but it would then disappear. The process would show up in Task Manager, but disappear in a second or two. After trying various suggestions via Intuit, I was ready to uninstall one or both of the updates.

One suggestion was to uninstall TT and reinstall it. When you start the uninstall, TT offers to “repair” the installation. Seemed like worth a try.

That was my fix. After the “repair”, TT loaded just fine. I’m posting this in case someone else runs into this “conflict”.

November 5, 2019

Office 2016
Update for Microsoft Access 2016 (KB4475539)
Update for Microsoft Office 2016 (KB4484138)
Update for Microsoft Office 2016 (KB4484137)
Update for Microsoft Office 2016 (KB4475588)
Update for Microsoft Office 2016 (KB4475552)
Update for Microsoft Office 2016 (KB4484145)
Update for Microsoft Outlook 2016 (KB4484139)
Update for Microsoft PowerPoint 2016 (KB4484134)
Update for Microsoft Word 2016 (KB4484135)

https://support.microsoft.com/en-us/help/4484139/november-5-2019-update-for-outlook-2016-kb4484139

This update adds a PreferProvidedEmailInAutoDiscoverAuthPrompts registry key that enables Exchange administrators to specify whether users will be authenticated by using the configured account email or the user principal name (UPN) during AutoDiscover scenarios.

Registry key

Location: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover

Value Type: DWORD

Value name: PreferProvidedEmailInAutoDiscoverAuthPrompts

Value data:

• 0: It’s the default value. Outlook will use the UPN when it’s available.
• 1: If the value is set to 1, Outlook will ignore the UPN and just use the provided account email

Avast Network Breached As Hackers Target CCleaner Again

“Avast said that it believes that the intrusion, first detected on Sept. 25, was likely targeting its CCleaner business in a supply chain attack. CCleaner, which is software that fights infections in PCs, was previously infiltrated by attackers in 2017 and led to the compromise of 2.27 million people’s systems.”

Avast, NordVPN Breaches Tied to Phantom User Accounts

“Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with little more than a password.”