Windows Has a New Wormable Vulnerability With No Patch Available

Posted on Thursday March 12, 2020

A vulnerability in version 3.1.1 of the Server Message Block (SMB) -- the service that's used to share files, printers, and other resources on local networks and over the internet -- can allow attacks to execute code of their choice on both servers and end-user computers that use the vulnerable protocol, Microsoft said in an advisory. Ars Technica reports: The flaw, which is tracked as CVE-2020-0796, affects Windows 10, versions 1903 and 1909 and Windows Server versions 1903 and 1909, which are relatively new releases that Microsoft has invested huge amounts of resources hardening against precisely these types of attacks. Patches aren't available, and Tuesday's advisory gave no timeline for one being released. Asked if there was a timeline for releasing a fix, a Microsoft representative said, "Beyond the advisory you linked, nothing else to share from Microsoft at this time." In the meantime, Microsoft said vulnerable servers can be protected by disabling compression to block unauthenticated attackers from exploiting the vulnerability against an SMBv3 server. Users can use the following PowerShell command to turn off compression without needing to reboot the machine: "Set-ItemProperty -Path "HKLM:SYSTEMCurrentControlSetServicesLanmanServerParameters" DisableCompression -Type DWORD -Value 1 -Force." That fix won't protect vulnerable client computers or servers if they connect to a malicious SMB service, but in that scenario, the attacks aren't wormable. Microsoft also recommended users block port 445, which is used to send SMB traffic between machines.

 

Take notes the modern way with OneNote

Posted on Wednesday March 11, 2020

Note-taking is a vital skill in life. Whether you're in a board meeting, conference, or lecture, you're bound to list, quote, or summarize certain points in order to recall them later and understand them better. Thanks to new technologies, you now have more ways of taking down notes than just a pen and paper. Using your mobile device and Microsoft OneNote, you can easily record your notes and have the bonus features of customizing and sharing them. Discover the ins and outs of this incredible app by reading on.

 

Gear up your network equipment with UPS

Posted on Tuesday March 10, 2020

During a power outage, responsible business owners use emergency power to keep desktop computers from unexpectedly shutting down. While that's certainly a good strategy for keeping machines operational and preventing data loss, there's something else you can do to ensure that your staff remains productive while weathering a storm: uninterruptible power supply (UPS) for networking equipment.

 

March 2020 security updates are available

Posted on Tuesday March 10, 2020

We have released the March security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month's security updates can be found in the Security Update Guide.

 

Use single sign-on for login efficiency

Posted on Monday March 09, 2020

Cloud subscriptions are undoubtedly valuable, but creating a new set of login credentials users have to memorize adds another level of inefficiency. With single sign-on (SSO), you can create one user profile that logs you into all of your online accounts. If you're overwhelmed by the need to create and manage strong passwords, SSO is for you.

 

Guide to removing these 5 PC clutter types

Posted on Wednesday March 04, 2020

It doesn't take long for computer desktops and hard drives to become cluttered, and it's probably why your Windows 10 PC has been so slow lately. This blog post will show you how to get rid of digital clutter so that your computer will be performing like new in no time.

 

Page:   1...134135136137138139140141142...350

Celebrating 35+ Years

Managed Computer Support Services

Contact Us

Support Ends for Windows 10 22H2, Windows Server 2012 R2, Exchange 2013, Office 2016