MS & security in the same breath?
I remember laughing myself hoarse over that oxymoron, but the joke has gotten so old that it merely makes me weep that MS hasn't gotten any better over the decades.
In spite of a flurry of patches designed to fix Windows Defender, at least one security researcher reckons there's still work to be done. James Lee, who has presented at conferences like Zer0con, has contacted The Register to say the key vulnerable component, MsMpEng, is still subject to remote code execution. As with the …
"MS still manage fewer vulnerabilities than any enterprise alternatives though"
It's 2017, are there still people who think you can simply count the total of vulnerabilities and learn anything meaningful?
There are vulnerabilities and vulnerabilities. I'll take a dozen local DoS vulnerabilities over one remote code execution any day, kthx.
They will have been honest mistakes, because everybody makes mistakes.
They have however clearly failed to correct some of their mistakes because of the guys in sunglasses.
It remains unclear whether the black helicopter told them to leave these alone, or just kept quiet - wrongly thinking that no other malicious actors would ever find the faults.
See Microsoft in an article and out the M$ comes.....
Why is it Linux people feel they have to denigrate Microsoft all the time - I don't like Skoda cars but I don't feel the need to go into every forum where they are mentioned just to slag them off.
I use Linux because I have to - I don't want to because of the bleatings of the Linux community and the hostility and ridicule noobs get in the forums
Sits back in his chair and awaits the diatribe and downvotes - Yawn.....
I use Windows because I have to; mandated at work, and most of my games don't have *nix support yet.
I personally would prefer to be able to use a Linux as my primary OS, but that's primarilly because I prefer the way it does things. I was perfectly happy to be using Windows 7, but the telemetry, ads, pre-installed "recommended" apps in Windows 10 are an annoyance, at best.
I just built out a new Win 7 Pro machine. Got the rollup to install but now it howls about needing updates to defender and complains it has never installed an update of any kind.
If Intell it to go find the updates I get the same 51% cpu wheelspin I had for a year on another Win 7 machine that only cleared when the big Win10 update was pushed out a few months ago.
I reckon the update telemetry database we all know is secretly in the path is swamped with 24x7 Win10 out-rattage operations.
This is from the tweet...so Linux now uses Windows Defender, eh? I suppose he might have discovered it using pen-testing software in Linux on virtualised Windows machine. This illustrates, IMO, why you need OS diversity; so that each can point out the pimples on the other one's nose.
Updated Two security vendors – Orca Security and Tenable – have accused Microsoft of unnecessarily putting customers' data and cloud environments at risk by taking far too long to fix critical vulnerabilities in Azure.
In a blog published today, Orca Security researcher Tzah Pahima claimed it took Microsoft several months to fully resolve a security flaw in Azure's Synapse Analytics that he discovered in January.
And in a separate blog published on Monday, Tenable CEO Amit Yoran called out Redmond for its lack of response to – and transparency around – two other vulnerabilities that could be exploited by anyone using Azure Synapse.
Microsoft isn't wasting time trying to put Activision Blizzard's problems in the rearview mirror, announcing a labor neutrality agreement with the game maker's recently-formed union.
Microsoft will be grappling with plenty of issues at Activision, including unfair labor lawsuits, sexual harassment allegations and toxic workplace claims. Activision subsidiary Raven Software, developers on the popular Call of Duty game series, recently voted to organize a union, which Activision entered into negotiations with only a few days ago.
Microsoft and the Communication Workers of America (CWA), which represents Raven Software employees, issued a joint statement saying that the agreement is a ground-breaking one that "will benefit Microsoft and its employees, and create opportunities for innovation in the gaming sector."
Microsoft is extending the Defender brand with a version aimed at families and individuals.
"Defender" has been the company's name of choice for its anti-malware platform for years. Microsoft Defender for individuals, available for Microsoft 365 Personal and Family subscribers, is a cross-platform application, encompassing macOS, iOS, and Android devices and extending "the protection already built into Windows Security beyond your PC."
The system comprises a dashboard showing the status of linked devices as well as alerts and suggestions.
Updated Microsoft's latest set of Windows patches are causing problems for users.
Windows 10 and 11 are affected, with both experiencing similar issues (although the latter seems to be suffering a little more).
KB5014697, released on June 14 for Windows 11, addresses a number of issues, but the known issues list has also been growing. Some .NET Framework 3.5 apps might fail to open (if using Windows Communication Foundation or Windows Workflow component) and the Wi-Fi hotspot features appears broken.
Microsoft has announced changes to labour relations policy for its US workforce that touch on noncompete clauses, confidentiality agreements and pay transparency.
“Microsoft is announcing new changes and investments aimed at further deepening our employee relationships and enhancing our workplace culture,” wrote HR execs Amy Pannoni and Amy Coleman on the company blog.
The pair wrote that the changes reflect employee fedback.
Microsoft has obtained a court order to seize 41 domains used by what the Windows giant said was an Iranian cybercrime group that ran a spear-phishing operation targeting organizations in the US, Middle East, and India.
The Microsoft Digital Crimes Unit said the gang, dubbed Bohrium, took a particular interest in those working in technology, transportation, government, and education sectors: its members would pretend to be job recruiters to lure marks into running malware on their PCs.
"Bohrium actors create fake social media profiles, often posing as recruiters," said Amy Hogan-Burney, GM of Microsoft's Digital Crimes Unit. "Once personal information was obtained from the victims, Bohrium sent malicious emails with links that ultimately infected their target's computers with malware."
Microsoft has pledged to clamp down on access to AI tools designed to predict emotions, gender, and age from images, and will restrict the usage of its facial recognition and generative audio models in Azure.
The Windows giant made the promise on Tuesday while also sharing its so-called Responsible AI Standard, a document [PDF] in which the US corporation vowed to minimize any harm inflicted by its machine-learning software. This pledge included assurances that the biz will assess the impact of its technologies, document models' data and capabilities, and enforce stricter use guidelines.
This is needed because – and let's just check the notes here – there are apparently not enough laws yet regulating machine-learning technology use. Thus, in the absence of this legislation, Microsoft will just have to force itself to do the right thing.
Desktop Tourism My 20-year-old son is an aspiring athlete who spends a lot of time in the gym and thinks nothing of lifting 100 kilograms in various directions. So I was a little surprised when I handed him Microsoft’s Surface Laptop Studio and he declared it uncomfortably heavy.
At 1.8kg it's certainly not among today's lighter laptops. That matters, because the device's big design selling point is a split along the rear of its screen that lets it sit at an angle that covers the keyboard and places its touch-sensitive surface in a comfortable position for prodding with a pen. The screen can also fold completely flat to allow the laptop to serve as a tablet.
Below is a .GIF to show that all in action.
Microsoft has added tabbed File Explorer functionality to the Window Insider beta channel, opening up the possibility of it making an appearance in the next major Windows Update.
File Explorer Tabs turned up in the bleeding edge Windows Insider Dev Channel last week, although – as is so frustratingly often the case – Microsoft opted for a staggered rollout. (It's not as if you joined the Insider channel for the latest and greatest to actually get your hands on the latest and greatest, right?)
Since then, things went well enough for Microsoft to roll out the tabs in build 22621.160 for the Beta Channel. Build 22621 is currently in the Release Preview Channel and is expected to be the basis for Windows 11 22H2, due at some point in the coming months.
Microsoft has sought to clarify the reasoning behind the imminent departure of HoloLens boss Alex Kipman.
Kipman was very much the face of Microsoft's mixed reality play over the years. He also had a hand in the company's Xbox add-on, the Kinect.
A cloud has hovered over the HoloLens division for some time, as reports of issues within the team circulated and a hoped-for follow-up to the increasingly long-in-the-tooth HoloLens 2 conspicuously failed to make an appearance during Microsoft's Build event in May.
Biting the hand that feeds IT © 1998–2022