Microsoft Starts Forced Feature Updates on Windows 10 1809
Microsoft says that Windows 10 1909 feature updates will start automatically installing on Windows 10 1809 devices beginning today to smooth out the update process to a more recent Windows 10 version.
"Beginning today, we will slowly start the phased process to automatically initiate a feature update for devices running the October 2018 Update (Windows 10, version 1809) Home and Pro editions, keeping those devices supported and receiving the monthly updates that are critical to device security and ecosystem health," Microsoft says.
"We are starting this rollout process several months in advance of the end of service date to provide adequate time for a smooth update process," the company adds on the Windows 10 Health Dashboard.
AWS Unveils New Security Services and Capabilities
Amazon Web Services (AWS) has expanded its portfolio with three new services and capabilities meant to help organizations build and operate securely in the cloud.
With the new Amazon Detective, customers can increase efficiency when investigating incidents across workloads. Currently available in preview, the service leverages machine learning, statistical analysis, and graph theory.
Microsoft Warns of Persistent Windows Hello for Business Orphaned Keys
Microsoft this week issued guidance regarding Windows Hello for Business (WHfB) public keys that persist even after the devices they are tied to are removed from Active Directory.
These WHfB public keys, the tech company explains, are written to the on-premises Active Directory after the user sets up WHfB. Tied to the user and the device added to Azure AD, these keys are considered orphaned when the device is removed.
VPN Connection Hijacking Vulnerability Affects Linux, Unix Systems
A vulnerability that can be exploited to determine if a user is connected to a VPN and hijack active TCP connections in a VPN tunnel has been found to affect various Linux and Unix operating systems.
The vulnerability, tracked as CVE-2019-14899, was discovered recently by a team of researchers from the University of New Mexico. They privately reported their findings to the developers of the affected operating systems some time ago, and they have now made their findings public on the SecLists.Org and Openwall security mailing lists.
Researcher Unveils CrackQ, a New Password Cracking Manager
CrackQ Password Cracking Manager is an Interface for Hashcat Served by a REST API and a JavaScript Web App
Hashcat is billed as the world's fastest password cracker. It uses the power of graphical processing units (GPUs) to compare guessed plaintext passwords with known password hashes at high speed -- often at hundreds of billions of guesses per second -- until a match is found. It has become an important tool for red teamers and pentesters analyzing the strength of customers' passwords.