Posted on Thursday March 12, 2020
A vulnerability in version 3.1.1 of the Server Message Block (SMB) -- the service that's used to share files, printers, and other resources on local networks and over the internet -- can allow attacks to execute code of their choice on both servers and end-user computers that use the vulnerable protocol, Microsoft said in an advisory. Ars Technica reports: The flaw, which is tracked as CVE-2020-0796, affects Windows 10, versions 1903 and 1909 and Windows Server versions 1903 and 1909, which are relatively new releases that Microsoft has invested huge amounts of resources hardening against precisely these types of attacks. Patches aren't available, and Tuesday's advisory gave no timeline for one being released. Asked if there was a timeline for releasing a fix, a Microsoft representative said, "Beyond the advisory you linked, nothing else to share from Microsoft at this time." In the meantime, Microsoft said vulnerable servers can be protected by disabling compression to block unauthenticated attackers from exploiting the vulnerability against an SMBv3 server. Users can use the following PowerShell command to turn off compression without needing to reboot the machine: "Set-ItemProperty -Path "HKLM:SYSTEMCurrentControlSetServicesLanmanServerParameters" DisableCompression -Type DWORD -Value 1 -Force." That fix won't protect vulnerable client computers or servers if they connect to a malicious SMB service, but in that scenario, the attacks aren't wormable. Microsoft also recommended users block port 445, which is used to send SMB traffic between machines.
Posted on Wednesday March 11, 2020
Note-taking is a vital skill in life. Whether you're in a board meeting, conference, or lecture, you're bound to list, quote, or summarize certain points in order to recall them later and understand them better. Thanks to new technologies, you now have more ways of taking down notes than just a pen and paper. Using your mobile device and Microsoft OneNote, you can easily record your notes and have the bonus features of customizing and sharing them. Discover the ins and outs of this incredible app by reading on.
Posted on Tuesday March 10, 2020
During a power outage, responsible business owners use emergency power to keep desktop computers from unexpectedly shutting down. While that's certainly a good strategy for keeping machines operational and preventing data loss, there's something else you can do to ensure that your staff remains productive while weathering a storm: uninterruptible power supply (UPS) for networking equipment.
Posted on Tuesday March 10, 2020
We have released the March security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month's security updates can be found in the Security Update Guide.
Posted on Monday March 09, 2020
Cloud subscriptions are undoubtedly valuable, but creating a new set of login credentials users have to memorize adds another level of inefficiency. With single sign-on (SSO), you can create one user profile that logs you into all of your online accounts. If you're overwhelmed by the need to create and manage strong passwords, SSO is for you.
Posted on Wednesday March 04, 2020
It doesn't take long for computer desktops and hard drives to become cluttered, and it's probably why your Windows 10 PC has been so slow lately. This blog post will show you how to get rid of digital clutter so that your computer will be performing like new in no time.