personal computer operating system by Microsoft released in 2015
POPULARITY
This episode features Sander Berkouwer and Raymond Comvalius, two longtime identity security experts and Microsoft Most Valuable Professionals (MVPs).Sander is an independent identity architect and author of the Active Directory Cookbooks. Raymond is an IT specialist and senior technical consultant specializing in hybrid identity, Microsoft Entra ID, and identity lifecycle automation.In this episode, they explore a growing blind spot in cloud security: application governance. As organizations adopt more cloud apps and integrations, identity platforms like Microsoft Entra ID often accumulate hundreds of application registrations with little oversight.They explain why governance so often falls behind adoption, share practical steps organizations can take to regain control, and discuss the next frontier of identity.Guest BiosSander Berkouwer DirTeam Sander Berkouwer works as an independent identity architect in the Netherlands, where he helps organizations make the most out of Microsoft products, services, strategies, and technologies. Sander blogs on DirTeam.com. He regularly gets invited as speaker for his enthusiastic approach, his in-depth real-world knowledge and as the author of the much-appraised Active Directory Cookbooks. Sander has been awarded the Microsoft Most Valuable Professional (MVP) award (for the last 17 years), Veeam Vanguard award (for the last 8 years) and VMware vExpert (for 3 years).Raymond Comvalius Raymond Comvalius is an IT specialist and senior technical consultant with more than two decades of experience delivering enterprise infrastructure, identity, and security improvements. His work centers on hybrid identity and Microsoft ecosystems, including Microsoft Entra ID, Conditional Access, and identity lifecycle automation with Microsoft Graph and scripting. Raymond advises teams on pragmatic roadmaps for strengthening authentication (MFA, passkeys/FIDO2, Windows Hello), improving governance, and operationalizing secure access at scale across cloud and on-prem environments. Beyond consulting, he serves as a board member and co-hosts the IT Bro's Podcast, sharing news and insights for identity and security professionals.Guest Quotes “In your tenant, you want to know what objects are in there, and it doesn't matter if those are users or groups or applications. You want to know what's in there so that you can keep track of what's going on.” - Raymond Comvalius“There's a difference between an application and an agent. An agent is far more ephemeral. It does a job that requires some sort of permission. It spins up, it does its thing, and it spins down.” - Sander BerkouwerTime stamps 00:45 Meet Sander Berkouwer and Raymond Comvalius: Microsoft Most Valuable Professionals (MVPs) 02:32 Importance of Entra Application Governance 12:29 How to Get Started with Application Governance 20:18 Understanding Entra Agent ID 26:59 Conclusion and Final ThoughtsSponsor The HIP Podcast is brought to you by Semperis, the leader in identity-driven cyber resilience for the hybrid enterprise. Trusted by the world's leading businesses, Semperis protects critical Active Directory and Entra ID environments from cyberattacks, ensuring rapid recovery and business continuity when every second counts. Visit semperis.com to learn more.Links Connect with Sander on LinkedInConnect with Raymond on LinkedInConnect with Sean on LinkedInDon't miss future episodesLearn more about Semperis
professorjrod@gmail.comIn this episode of Technology Tap: CompTIA Study Guide, we dive deep into Windows security at scale, focusing on critical points where security measures impact real network environments. Learn how small misconfigurations, like one wrong checkbox, can expose significant data risks. Whether you are part of a study group, preparing for the CompTIA exam, or aiming to develop your IT skills, this episode covers practical Windows security architecture relevant to system administration, IT support, and tech exam prep. We discuss strategies for managing shared resources, centralized identity, and enforceable policies that you'll encounter in both real-world technology education settings and certification environments. Tune in to enhance your understanding and get tips that will aid you in your IT certification journey.I walk through modern Windows authentication, including what Windows Hello is designed to fix, why passwords keep failing in the real world, and how device bound PINs, biometrics, and phishing resistant security keys change the security model. From there, we talk about reducing login chaos with single sign-on and how SAML authentication helps systems trust an identity provider without making users juggle endless credentials.Then we move into the enterprise core: Windows domains, Active Directory, and how domain controllers, organizational units, and security groups keep management scalable. I also cover Group Policy as the tool that enforces consistent security settings across hundreds or thousands of PCs, plus the commands that matter when you need to verify and refresh policy like GPUpdate and GPResult.Finally, we dig into the breach magnet: Windows shares and permissions. You'll learn the difference between share permissions and NTFS permissions, why “most restrictive wins,” how deny rules and inheritance can save you or sink you, and why least privilege is the habit that keeps sensitive data out of the wrong hands. If this helps you, subscribe, share it with a friend in IT, and leave a review with the topic you want next.Support the showArt By Sarah/DesmondMusic by Joakim KarudLittle chacha ProductionsJuan Rodriguez can be reached atTikTok @ProfessorJrodProfessorJRod@gmail.com@Prof_JRodInstagram ProfessorJRod
In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell
In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell
In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell
In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell
In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell
In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell
Parce que… c'est l'épisode 0x730! Shameless plug 31 mars au 2 avril 2026 - Forum INCYBER - Europe 2026 14 au 17 avril 2026 - Botconf 2026 20 au 22 avril 2026 - ITSec Code rabais de 15%: Seqcure15 28 et 29 avril 2026 - Cybereco Cyberconférence 2026 9 au 17 mai 2026 - NorthSec 2026 3 au 5 juin 2026 - SSTIC 2026 19 septembre 2026 - Bsides Montréal 1 au 3 décembre 2026 - Forum INCYBER - Canada 2026 24 et 25 février 2027 - SéQCure 2027 Description Introduction Dans cet épisode spécial PME du podcast 0x730, Nicolas reçoit à nouveau Claude Mercier pour une conversation enregistrée au chalet. Claude, qui travaille régulièrement avec des PME, pose une série de questions pratiques sur la cybersécurité en entreprise. L'objectif est simple : traduire des concepts techniques parfois abstraits en conseils concrets et accessibles pour les gestionnaires et propriétaires de petites et moyennes entreprises. Sécuriser les postes de travail La première question porte sur la configuration idéale d'un poste ou d'un portable en PME. Nicolas explique qu'il existe déjà des gabarits de configuration préconçus qui facilitent grandement le travail. Dans un environnement centralisé, leur déploiement est simplifié ; pour les plus petites structures, ils peuvent être appliqués machine par machine. Le principe de base reste le même : garder les systèmes d'exploitation constamment à jour, ce qui constitue la mesure de protection la plus efficace et la plus négligée. Pour illustrer l'importance de protéger un poste, Nicolas recourt à une analogie simple : un ordinateur, c'est comme un édifice physique. On y met des serrures, des verrous, des coffres-forts, non pas pour la forme, mais parce que l'intérieur contient des informations précieuses — liste de clients, données financières, procédés exclusifs. Perdre le contrôle de ces informations peut mettre en péril l'entreprise entière. Chiffrement et mot de passe Le sujet du chiffrement de disque est abordé avec nuance. Des outils comme BitLocker de Microsoft permettent de chiffrer le contenu d'un disque dur, mais cette protection ne vaut que si un mot de passe d'ouverture de session est également configuré. Sans ce mot de passe, le coffre-fort virtuel reste grand ouvert. Nicolas précise que le chiffrement sert principalement à protéger les données en cas de vol physique de l'appareil ou du disque dur : sans la clé associée, le contenu devient illisible pour n'importe qui. Antivirus modernes, EDR et XDR La question des antivirus permet à Nicolas de distinguer les solutions d'ancienne génération des solutions modernes. Le Defender intégré à Windows, par exemple, est considéré comme suffisant pour la grande majorité des PME qui n'évoluent pas dans des secteurs à risques élevés. Il bloque environ 95 % des menaces courantes. Les termes EDR (Endpoint Detection and Response) et XDR (Extended Detection and Response) désignent précisément ces antivirus de nouvelle génération. Leur grande différence par rapport aux anciens outils : ils ne se contentent plus de reconnaître des signatures de fichiers malveillants, ils analysent les comportements anormaux sur la machine. Un processus qui agit de façon suspecte sera détecté, même si aucune signature connue ne lui correspond. Les droits administrateur Sur la question de qui devrait avoir les droits d'administrateur dans une PME, Nicolas est catégorique : le moins de personnes possible. Il compare ces droits à l'accès aux paramètres internes d'un moteur de voiture : personne ne va bricoler les composants d'un véhicule sans être mécanicien qualifié. De même, un utilisateur non formé qui dispose de droits admin peut involontairement causer des dommages considérables, ou pire, offrir aux attaquants le même niveau d'accès que le sien s'il clique sur un lien malveillant. VPN : mythes et réalités Les VPN commerciaux font l'objet d'un marketing souvent trompeur. Nicolas distingue deux types de VPN : les VPN commerciaux (NordVPN, ProtonVPN, etc.), dont l'utilité réelle est très limitée pour une PME, et les VPN d'entreprise, que l'on configure soi-même pour permettre l'accès sécurisé à distance à son propre réseau interne. Le premier est largement superflu dans le contexte actuel, car les communications en ligne sont déjà chiffrées nativement. Le second est utile, mais doit être déployé avec soin : si le poste utilisé est mal sécurisé, le tunnel VPN devient un vecteur d'intrusion vers l'ensemble du réseau d'entreprise. Windows Hello et l'authentification sans mot de passe Nicolas présente Windows Hello comme une solution d'authentification moderne dite passwordless. Plutôt qu'un mot de passe classique — qui peut être volé —, cette approche repose sur une clé cryptographique associée à un scan biométrique. Il n'y a donc rien à dérober. La sécurité est plus robuste et l'expérience utilisateur, plus fluide. Sauvegardes : l'approche 3-2-1 La deuxième grande thématique concerne les sauvegardes. Nicolas présente la règle 3-2-1 : trois copies des données, sur deux supports différents, dont une hors site. L'objectif est de pouvoir récupérer rapidement les informations critiques en cas de panne mécanique, de vol ou d'attaque par rançongiciel. Point crucial : les sauvegardes doivent être hors ligne ou hors réseau (offline). Une copie accessible depuis le réseau de l'entreprise peut être chiffrée ou effacée par un attaquant en même temps que les données originales, la rendant inutile. Elles doivent également être chiffrées, qu'elles soient stockées dans le nuage ou transportées physiquement. Enfin, il est tout à fait possible de sauvegarder les courriels hébergés sur des plateformes comme Microsoft 365 ou Google Workspace grâce à des services tiers dédiés. La « question noire » : les rançongiciels En guise de conclusion, Claude pose une question délicate : si Nicolas était un attaquant, quelle stratégie adopterait-il ? La réponse est sans équivoque : les rançongiciels ciblant les PME. Ces entreprises sont souvent les moins bien protégées, n'ont pas de sauvegardes fiables, et sont prêtes à payer pour récupérer leurs données. Le coût d'une cyberattaque peut rapidement atteindre 100 000 $ par jour en honoraires d'urgence, sans compter les pertes d'exploitation, voire la perte de clients au profit de concurrents. La bonne nouvelle : les PME qui appliquent les mesures de base — sauvegardes hors ligne, MFA, séparation des accès — compliquent suffisamment la tâche des attaquants pour que ceux-ci renoncent plus rapidement. La tendance s'améliore lentement, mais le chemin reste long. Collaborateurs Nicolas-Loïc Fortin Claude Mercier Crédits Montage par Intrasecure inc Locaux réels par Le Chalet de Claude
Can Microsoft's push for cloud PCs and AI-powered agents redefine where and how we work? If you keep to the defaults, Windows 11 is secure. Copilot+ PC is even more secure. But you can take additional steps to secure it either way, and you should. Plus, Paul's been trying to play different types of games, and Resident Evil Requiem is better (in his opinion) than Silent Hill f and Silent Hill 2 remake... if you want a horror game. Also, there's a cheaper new Audible plan thanks to Spotify! Windows 11 Shenanigans? If you use a third-party AI client in Edge Canary... you will not be amused. Bitwarden (TWiT sponsor) is (possibly the 1st?) third-party password manager to support passkey sign-ins on Windows 11 New Canary, Dev, and Beta builds last Friday- Canary is more of the same, Dev/Beta get shared audio improvements, narrator improvements, new IT policies ASUS and Dell will soon sell Windows 365 Cloud PCs Google is moving Chrome to a two-week dev schedule. Should we assume Microsoft will follow suit with Edge? Dell is up 39 percent, but because of AI servers not PCs NVIDIA revenues up 73 percent to $68.1 billion AI/dev OpenAI closes $110 billion funding round as the AI circle jerk continues Microsoft brings Copilot Tasks to consumer Copilot Google introduces AppFunctions for Android, it's way to make mobile apps work like MCP (be semantic), similar to what Microsoft is doing in Windows Windows App Development CLI updated to 0.02 with Store CLI integration and .NET project support Build 2026 is in San Francisco, as expected, but in June - overlap with WWDC? Xbox and gaming Here come the first Game Pass titles of March Microsoft highlights some indie games to consider Xbox ROG Ally gets AI-based game recaps Legion Go Fold is the star of the new PCs at MWC Sony might be backtracking on its PC games plans Developing: Epic/Google settlement was approved Tips & picks App pick of the week: Resident Evil Requiem Tip of the week: Secure your Windows 11 PC RunAs Radio this week: Hiring in 2026 with Suzi Edwards-Alexander Brown liquor pick of the week: St. Augustine Florida Straight Bourbon Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Can Microsoft's push for cloud PCs and AI-powered agents redefine where and how we work? If you keep to the defaults, Windows 11 is secure. Copilot+ PC is even more secure. But you can take additional steps to secure it either way, and you should. Plus, Paul's been trying to play different types of games, and Resident Evil Requiem is better (in his opinion) than Silent Hill f and Silent Hill 2 remake... if you want a horror game. Also, there's a cheaper new Audible plan thanks to Spotify! Windows 11 Shenanigans? If you use a third-party AI client in Edge Canary... you will not be amused. Bitwarden (TWiT sponsor) is (possibly the 1st?) third-party password manager to support passkey sign-ins on Windows 11 New Canary, Dev, and Beta builds last Friday- Canary is more of the same, Dev/Beta get shared audio improvements, narrator improvements, new IT policies ASUS and Dell will soon sell Windows 365 Cloud PCs Google is moving Chrome to a two-week dev schedule. Should we assume Microsoft will follow suit with Edge? Dell is up 39 percent, but because of AI servers not PCs NVIDIA revenues up 73 percent to $68.1 billion AI/dev OpenAI closes $110 billion funding round as the AI circle jerk continues Microsoft brings Copilot Tasks to consumer Copilot Google introduces AppFunctions for Android, it's way to make mobile apps work like MCP (be semantic), similar to what Microsoft is doing in Windows Windows App Development CLI updated to 0.02 with Store CLI integration and .NET project support Build 2026 is in San Francisco, as expected, but in June - overlap with WWDC? Xbox and gaming Here come the first Game Pass titles of March Microsoft highlights some indie games to consider Xbox ROG Ally gets AI-based game recaps Legion Go Fold is the star of the new PCs at MWC Sony might be backtracking on its PC games plans Developing: Epic/Google settlement was approved Tips & picks App pick of the week: Resident Evil Requiem Tip of the week: Secure your Windows 11 PC RunAs Radio this week: Hiring in 2026 with Suzi Edwards-Alexander Brown liquor pick of the week: St. Augustine Florida Straight Bourbon Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Can Microsoft's push for cloud PCs and AI-powered agents redefine where and how we work? If you keep to the defaults, Windows 11 is secure. Copilot+ PC is even more secure. But you can take additional steps to secure it either way, and you should. Plus, Paul's been trying to play different types of games, and Resident Evil Requiem is better (in his opinion) than Silent Hill f and Silent Hill 2 remake... if you want a horror game. Also, there's a cheaper new Audible plan thanks to Spotify! Windows 11 Shenanigans? If you use a third-party AI client in Edge Canary... you will not be amused. Bitwarden (TWiT sponsor) is (possibly the 1st?) third-party password manager to support passkey sign-ins on Windows 11 New Canary, Dev, and Beta builds last Friday- Canary is more of the same, Dev/Beta get shared audio improvements, narrator improvements, new IT policies ASUS and Dell will soon sell Windows 365 Cloud PCs Google is moving Chrome to a two-week dev schedule. Should we assume Microsoft will follow suit with Edge? Dell is up 39 percent, but because of AI servers not PCs NVIDIA revenues up 73 percent to $68.1 billion AI/dev OpenAI closes $110 billion funding round as the AI circle jerk continues Microsoft brings Copilot Tasks to consumer Copilot Google introduces AppFunctions for Android, it's way to make mobile apps work like MCP (be semantic), similar to what Microsoft is doing in Windows Windows App Development CLI updated to 0.02 with Store CLI integration and .NET project support Build 2026 is in San Francisco, as expected, but in June - overlap with WWDC? Xbox and gaming Here come the first Game Pass titles of March Microsoft highlights some indie games to consider Xbox ROG Ally gets AI-based game recaps Legion Go Fold is the star of the new PCs at MWC Sony might be backtracking on its PC games plans Developing: Epic/Google settlement was approved Tips & picks App pick of the week: Resident Evil Requiem Tip of the week: Secure your Windows 11 PC RunAs Radio this week: Hiring in 2026 with Suzi Edwards-Alexander Brown liquor pick of the week: St. Augustine Florida Straight Bourbon Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Can Microsoft's push for cloud PCs and AI-powered agents redefine where and how we work? If you keep to the defaults, Windows 11 is secure. Copilot+ PC is even more secure. But you can take additional steps to secure it either way, and you should. Plus, Paul's been trying to play different types of games, and Resident Evil Requiem is better (in his opinion) than Silent Hill f and Silent Hill 2 remake... if you want a horror game. Also, there's a cheaper new Audible plan thanks to Spotify! Windows 11 Shenanigans? If you use a third-party AI client in Edge Canary... you will not be amused. Bitwarden (TWiT sponsor) is (possibly the 1st?) third-party password manager to support passkey sign-ins on Windows 11 New Canary, Dev, and Beta builds last Friday- Canary is more of the same, Dev/Beta get shared audio improvements, narrator improvements, new IT policies ASUS and Dell will soon sell Windows 365 Cloud PCs Google is moving Chrome to a two-week dev schedule. Should we assume Microsoft will follow suit with Edge? Dell is up 39 percent, but because of AI servers not PCs NVIDIA revenues up 73 percent to $68.1 billion AI/dev OpenAI closes $110 billion funding round as the AI circle jerk continues Microsoft brings Copilot Tasks to consumer Copilot Google introduces AppFunctions for Android, it's way to make mobile apps work like MCP (be semantic), similar to what Microsoft is doing in Windows Windows App Development CLI updated to 0.02 with Store CLI integration and .NET project support Build 2026 is in San Francisco, as expected, but in June - overlap with WWDC? Xbox and gaming Here come the first Game Pass titles of March Microsoft highlights some indie games to consider Xbox ROG Ally gets AI-based game recaps Legion Go Fold is the star of the new PCs at MWC Sony might be backtracking on its PC games plans Developing: Epic/Google settlement was approved Tips & picks App pick of the week: Resident Evil Requiem Tip of the week: Secure your Windows 11 PC RunAs Radio this week: Hiring in 2026 with Suzi Edwards-Alexander Brown liquor pick of the week: St. Augustine Florida Straight Bourbon Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Can Microsoft's push for cloud PCs and AI-powered agents redefine where and how we work? If you keep to the defaults, Windows 11 is secure. Copilot+ PC is even more secure. But you can take additional steps to secure it either way, and you should. Plus, Paul's been trying to play different types of games, and Resident Evil Requiem is better (in his opinion) than Silent Hill f and Silent Hill 2 remake... if you want a horror game. Also, there's a cheaper new Audible plan thanks to Spotify! Windows 11 Shenanigans? If you use a third-party AI client in Edge Canary... you will not be amused. Bitwarden (TWiT sponsor) is (possibly the 1st?) third-party password manager to support passkey sign-ins on Windows 11 New Canary, Dev, and Beta builds last Friday- Canary is more of the same, Dev/Beta get shared audio improvements, narrator improvements, new IT policies ASUS and Dell will soon sell Windows 365 Cloud PCs Google is moving Chrome to a two-week dev schedule. Should we assume Microsoft will follow suit with Edge? Dell is up 39 percent, but because of AI servers not PCs NVIDIA revenues up 73 percent to $68.1 billion AI/dev OpenAI closes $110 billion funding round as the AI circle jerk continues Microsoft brings Copilot Tasks to consumer Copilot Google introduces AppFunctions for Android, it's way to make mobile apps work like MCP (be semantic), similar to what Microsoft is doing in Windows Windows App Development CLI updated to 0.02 with Store CLI integration and .NET project support Build 2026 is in San Francisco, as expected, but in June - overlap with WWDC? Xbox and gaming Here come the first Game Pass titles of March Microsoft highlights some indie games to consider Xbox ROG Ally gets AI-based game recaps Legion Go Fold is the star of the new PCs at MWC Sony might be backtracking on its PC games plans Developing: Epic/Google settlement was approved Tips & picks App pick of the week: Resident Evil Requiem Tip of the week: Secure your Windows 11 PC RunAs Radio this week: Hiring in 2026 with Suzi Edwards-Alexander Brown liquor pick of the week: St. Augustine Florida Straight Bourbon Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Can Microsoft's push for cloud PCs and AI-powered agents redefine where and how we work? If you keep to the defaults, Windows 11 is secure. Copilot+ PC is even more secure. But you can take additional steps to secure it either way, and you should. Plus, Paul's been trying to play different types of games, and Resident Evil Requiem is better (in his opinion) than Silent Hill f and Silent Hill 2 remake... if you want a horror game. Also, there's a cheaper new Audible plan thanks to Spotify! Windows 11 Shenanigans? If you use a third-party AI client in Edge Canary... you will not be amused. Bitwarden (TWiT sponsor) is (possibly the 1st?) third-party password manager to support passkey sign-ins on Windows 11 New Canary, Dev, and Beta builds last Friday- Canary is more of the same, Dev/Beta get shared audio improvements, narrator improvements, new IT policies ASUS and Dell will soon sell Windows 365 Cloud PCs Google is moving Chrome to a two-week dev schedule. Should we assume Microsoft will follow suit with Edge? Dell is up 39 percent, but because of AI servers not PCs NVIDIA revenues up 73 percent to $68.1 billion AI/dev OpenAI closes $110 billion funding round as the AI circle jerk continues Microsoft brings Copilot Tasks to consumer Copilot Google introduces AppFunctions for Android, it's way to make mobile apps work like MCP (be semantic), similar to what Microsoft is doing in Windows Windows App Development CLI updated to 0.02 with Store CLI integration and .NET project support Build 2026 is in San Francisco, as expected, but in June - overlap with WWDC? Xbox and gaming Here come the first Game Pass titles of March Microsoft highlights some indie games to consider Xbox ROG Ally gets AI-based game recaps Legion Go Fold is the star of the new PCs at MWC Sony might be backtracking on its PC games plans Developing: Epic/Google settlement was approved Tips & picks App pick of the week: Resident Evil Requiem Tip of the week: Secure your Windows 11 PC RunAs Radio this week: Hiring in 2026 with Suzi Edwards-Alexander Brown liquor pick of the week: St. Augustine Florida Straight Bourbon Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Forget the built-in Windows tools—Paul shares why third-party password managers are the secret to making passkeys smarter, more powerful, and truly universal across all your devices. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: canary.tools/twit - use code: TWIT
Forget the built-in Windows tools—Paul shares why third-party password managers are the secret to making passkeys smarter, more powerful, and truly universal across all your devices. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: canary.tools/twit - use code: TWIT
Forget the built-in Windows tools—Paul shares why third-party password managers are the secret to making passkeys smarter, more powerful, and truly universal across all your devices. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: canary.tools/twit - use code: TWIT
Forget the built-in Windows tools—Paul shares why third-party password managers are the secret to making passkeys smarter, more powerful, and truly universal across all your devices. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: canary.tools/twit - use code: TWIT
Curious about the reality behind Microsoft's passkey promise? Find out how Windows 11's latest update makes your logins both safer and simpler across all your devices, and why Paul Thurrott thinks you shouldn't rely on the default options. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: threatlocker.com/twit
Curious about the reality behind Microsoft's passkey promise? Find out how Windows 11's latest update makes your logins both safer and simpler across all your devices, and why Paul Thurrott thinks you shouldn't rely on the default options. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: threatlocker.com/twit
Curious about the reality behind Microsoft's passkey promise? Find out how Windows 11's latest update makes your logins both safer and simpler across all your devices, and why Paul Thurrott thinks you shouldn't rely on the default options. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: threatlocker.com/twit
Curious about the reality behind Microsoft's passkey promise? Find out how Windows 11's latest update makes your logins both safer and simpler across all your devices, and why Paul Thurrott thinks you shouldn't rely on the default options. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: threatlocker.com/twit
Happy Patch Tuesday! In this October episode, security specialists Ryan Braunstein and Mat Lee break down some of the month's most critical vulnerabilities — and why this batch of CVEs might just be the spookiest yet.The duo dives deep into:A Unity Engine remote code execution flaw that impacts games, VR apps, and even training toolsThe Windows Hello bypass vulnerability that lets attackers inject their own biometric data to access local accountsA Microsoft Exchange Server privilege escalation that could expose entire inboxesWith expert insights, real-world context, and a touch of humor, Ryan and Mat unpack what these vulnerabilities mean for IT and security pros — and what steps you should take right now to stay protected
Why does Microsoft quietly ship important new protections without enabling them, and should you trust the defaults? Join us as we unpack Windows 11's quiet security secrets and what they mean for your digital life. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Want access to the ad-free video and exclusive features? Become a member of Club TWiT today! https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord.
Windows 11's latest update finally tackles a 30-year-old security flaw with a new feature called Administrator Protection. Find out how this major change uses Windows Hello to quietly lock down your PC without making your day-to-day experience a hassle. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Want access to the ad-free video and exclusive features? Become a member of Club TWiT today! https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord.
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the concept of FUD (Fear, Uncertainty, and Doubt) prevalent in the cybersecurity industry. They discuss the implications of sensationalized reporting, particularly around Windows Hello for Business vulnerabilities and the importance of adopting fish resistant multi-factor authentication (MFA). The conversation also covers the security of passkeys, the risks of social engineering, and the need for critical consumption of cybersecurity news to avoid misinformation.----------------------------------------------------YouTube Video Link: https://youtu.be/IauO5oA2BA0----------------------------------------------------Documentation:https://cybersecuritynews.com/windows-hello-for-business-flaw/https://arstechnica.com/security/2025/08/new-research-claiming-passkeys-can-be-stolen-is-pure-nonsense/https://www.inc.com/jason-aten/why-google-is-warning-2-5-billion-gmail-users-to-stop-using-their-password/91234290----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
Gain a comprehensive understanding of how the Windows Resiliency Initiative is transforming the operating system to stand resilient against potential threats. Learn about the Quick Machine Recovery feature, a game-changer that ensures you won't be left stranded during system boot hiccups. We discuss the upcoming administrator protection enhancements that demand user approval for admin tasks, providing an extra shield of security. Plus, we're diving into the essentials like Windows Hello and smart app control, urging you to activate security settings that fortify your system against digital threats. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Want access to the ad-free video and exclusive features? Become a member of Club TWiT today! https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord.
On this week's episode of the Windows Central Podcast, Daniel and Zac discuss the latest news with Windows 11, Microsoft's announcement that the next Xbox will be powered by an AMD chip, Windows Hello no longer working in the dark, and the latest with AI.
-BT 6.0! https://www.notebookcheck.net/5-Bluetooth-6-0-features-I-think-will-improve-your-earbuds-experience.1036858.0.html -New Corvette: https://www.caranddriver.com/news/a65079561/2026-chevrolet-corvette-zr1x-revealed/ -Tesla Solar, Elon, and getting DOGED. Cut til you bleed, then back off 10%. NEM 3.0(Net Energy Metering) Way over scoped usage, custom development, direct line support. -Personal solar setup on trailer overview. 12v vs 24v and what it took to run my air conditioner purely on battery. -23andMe bankruptcy is going… swimmingly. Seriously go delete your genetic data from that place right now. https://www.foxbusiness.com/technology/states-take-legal-action-23andme-attempts-sell-customer-genetic-information-amid-bankruptcy -This explains a lot for me. Maybe it will for you too. Windows Hello face unlock low light ability nerfed by microsoft. https://www.windowscentral.com/software-apps/windows-11/windows-hello-face-unlock-no-longer-works-in-the-dark-and-microsoft-says-its-not-a-bug -Artificial Eclipse Follow up! https://www.space.com/stargazing/solar-eclipses/behold-1st-images-of-artificial-solar-eclipse-captured-by-esas-proba-3-mission
Windows Hello's Facial Authentication UpdateMicrosoft updated Windows Hello to require both infrared and color cameras for facial authentication, addressing a spoofing vulnerability. This enhances security but disables functionality in low-light settings, potentially inconveniencing users and pushing some toward alternatives like Linux for flexible authentication.EchoLeak and AI Security'EchoLeak' is a zero-click vulnerability in Microsoft 365 Copilot, discovered by Aim Labs, allowing data exfiltration via malicious emails exploiting an "LLM Scope Violation." It reveals risks in AI systems combining external inputs with internal data, emphasizing the need for robust guardrails.Denmark's Shift to LibreOffice and LinuxDenmark is adopting LibreOffice and Linux to boost digital sovereignty, reduce reliance on foreign tech like Microsoft, and mitigate geopolitical and cost-related risks. This follows a 72% rise in Microsoft software costs over five years.Chinese AI Firms Bypassing U.S. Chip ControlsChinese AI companies evade U.S. chip export restrictions by processing data in third countries like Malaysia, using tactics like physically transporting data and setting up shell entities to access high-end chips and return trained AI models.Mattel and OpenAI PartnershipMattel's collaboration with OpenAI to create AI-enhanced toys introduces engaging, safe experiences for kids but raises privacy and security concerns, highlighting the need for "Zero trust" models in handling children's data.Apple's Passkey Import/Export FeatureApple's new FIDO-based passkey import/export feature allows secure credential transfers across platforms, enhancing security and convenience. It uses biometric or PIN authentication, replacing less secure methods and improving interoperability.Airlines Selling Passenger Data to DHSThe Airlines Reporting Corporation, owned by U.S. airlines, sold domestic flight data to DHS's CBP, including names and itineraries, with a clause hiding the source. This raises privacy concerns about government tracking without transparency.WhatsApp's New Ad PolicyWhatsApp's introduction of ads in its "Updates" section deviates from its original "no ads" philosophy. While limited and preserving chat encryption, this shift alters the ad-free experience that attracted its two billion users.https://rprescottstearns.blogspot.com/2025/06/broken-windows-it-privacy-and-security.html
No, it's not you. Windows Hello doesn't work in the dark anymore. For reasons. Say "Hello" to the Windows Hello controversy of the month! Windows AI agent in Settings and Recall export experience in Dev/Beta channels - plus the old clock is back, baby July Patch Tuesday preview: App defaults (EEA only), Share images with visual preview, and some fixes for Windows 11 (The first one is coming to Windows 10 too - tied to the DMA news from last week.) Commentary: What Apple gets right in macOS 26 (and otherwise) Surface One year with Surface Laptop 7 Microsoft issues its first firmware updates for Surface Pro 11 and Surface Laptop 7 in several months, sort of Microsoft 365 BBB complains about how Microsoft promotes Microsoft 365; Microsoft disagrees but will change the way it communicates about these features AI OpenAI, Microsoft, and... the nuclear option?? The Open AI Files provides an insider view of the company and finds it lacking Copilot Vision is GA in the United States - It's also free to try on mobile The Browser Company starts explaining Dia, finally Xbox and Games Microsoft announces (extends?) partnership with AMD on future Xbox hardware - a one minute video with plenty to parse Next-gen hardware Multi-year partnership with AMD on Xbox consoles and gaming handhelds Compatibility with existing game libraries Working closely with the Windows team, ensure Windows is the number one games platform Microsoft shares Xbox Ally details with devs, a hint at the coming Windows-based Xbox platform requirements? More Game Pass titles for June, including an old favorite Minecraft gets three great updates Steam will run natively on Apple Silicon soon. Unlike all the games. Tips and Picks Tip of the week: Don't give in App pick of the week: Camtasia online RunAs Radio this week: SQL Server 2025 with Bob Ward Brown liquor pick of the week: The Macallan 18 Sherry Oak Cask Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: uscloud.com
No, it's not you. Windows Hello doesn't work in the dark anymore. For reasons. Say "Hello" to the Windows Hello controversy of the month! Windows AI agent in Settings and Recall export experience in Dev/Beta channels - plus the old clock is back, baby July Patch Tuesday preview: App defaults (EEA only), Share images with visual preview, and some fixes for Windows 11 (The first one is coming to Windows 10 too - tied to the DMA news from last week.) Commentary: What Apple gets right in macOS 26 (and otherwise) Surface One year with Surface Laptop 7 Microsoft issues its first firmware updates for Surface Pro 11 and Surface Laptop 7 in several months, sort of Microsoft 365 BBB complains about how Microsoft promotes Microsoft 365; Microsoft disagrees but will change the way it communicates about these features AI OpenAI, Microsoft, and... the nuclear option?? The Open AI Files provides an insider view of the company and finds it lacking Copilot Vision is GA in the United States - It's also free to try on mobile The Browser Company starts explaining Dia, finally Xbox and Games Microsoft announces (extends?) partnership with AMD on future Xbox hardware - a one minute video with plenty to parse Next-gen hardware Multi-year partnership with AMD on Xbox consoles and gaming handhelds Compatibility with existing game libraries Working closely with the Windows team, ensure Windows is the number one games platform Microsoft shares Xbox Ally details with devs, a hint at the coming Windows-based Xbox platform requirements? More Game Pass titles for June, including an old favorite Minecraft gets three great updates Steam will run natively on Apple Silicon soon. Unlike all the games. Tips and Picks Tip of the week: Don't give in App pick of the week: Camtasia online RunAs Radio this week: SQL Server 2025 with Bob Ward Brown liquor pick of the week: The Macallan 18 Sherry Oak Cask Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: uscloud.com
No, it's not you. Windows Hello doesn't work in the dark anymore. For reasons. Say "Hello" to the Windows Hello controversy of the month! Windows AI agent in Settings and Recall export experience in Dev/Beta channels - plus the old clock is back, baby July Patch Tuesday preview: App defaults (EEA only), Share images with visual preview, and some fixes for Windows 11 (The first one is coming to Windows 10 too - tied to the DMA news from last week.) Commentary: What Apple gets right in macOS 26 (and otherwise) Surface One year with Surface Laptop 7 Microsoft issues its first firmware updates for Surface Pro 11 and Surface Laptop 7 in several months, sort of Microsoft 365 BBB complains about how Microsoft promotes Microsoft 365; Microsoft disagrees but will change the way it communicates about these features AI OpenAI, Microsoft, and... the nuclear option?? The Open AI Files provides an insider view of the company and finds it lacking Copilot Vision is GA in the United States - It's also free to try on mobile The Browser Company starts explaining Dia, finally Xbox and Games Microsoft announces (extends?) partnership with AMD on future Xbox hardware - a one minute video with plenty to parse Next-gen hardware Multi-year partnership with AMD on Xbox consoles and gaming handhelds Compatibility with existing game libraries Working closely with the Windows team, ensure Windows is the number one games platform Microsoft shares Xbox Ally details with devs, a hint at the coming Windows-based Xbox platform requirements? More Game Pass titles for June, including an old favorite Minecraft gets three great updates Steam will run natively on Apple Silicon soon. Unlike all the games. Tips and Picks Tip of the week: Don't give in App pick of the week: Camtasia online RunAs Radio this week: SQL Server 2025 with Bob Ward Brown liquor pick of the week: The Macallan 18 Sherry Oak Cask Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: uscloud.com
No, it's not you. Windows Hello doesn't work in the dark anymore. For reasons. Say "Hello" to the Windows Hello controversy of the month! Windows AI agent in Settings and Recall export experience in Dev/Beta channels - plus the old clock is back, baby July Patch Tuesday preview: App defaults (EEA only), Share images with visual preview, and some fixes for Windows 11 (The first one is coming to Windows 10 too - tied to the DMA news from last week.) Commentary: What Apple gets right in macOS 26 (and otherwise) Surface One year with Surface Laptop 7 Microsoft issues its first firmware updates for Surface Pro 11 and Surface Laptop 7 in several months, sort of Microsoft 365 BBB complains about how Microsoft promotes Microsoft 365; Microsoft disagrees but will change the way it communicates about these features AI OpenAI, Microsoft, and... the nuclear option?? The Open AI Files provides an insider view of the company and finds it lacking Copilot Vision is GA in the United States - It's also free to try on mobile The Browser Company starts explaining Dia, finally Xbox and Games Microsoft announces (extends?) partnership with AMD on future Xbox hardware - a one minute video with plenty to parse Next-gen hardware Multi-year partnership with AMD on Xbox consoles and gaming handhelds Compatibility with existing game libraries Working closely with the Windows team, ensure Windows is the number one games platform Microsoft shares Xbox Ally details with devs, a hint at the coming Windows-based Xbox platform requirements? More Game Pass titles for June, including an old favorite Minecraft gets three great updates Steam will run natively on Apple Silicon soon. Unlike all the games. Tips and Picks Tip of the week: Don't give in App pick of the week: Camtasia online RunAs Radio this week: SQL Server 2025 with Bob Ward Brown liquor pick of the week: The Macallan 18 Sherry Oak Cask Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: uscloud.com
No, it's not you. Windows Hello doesn't work in the dark anymore. For reasons. Say "Hello" to the Windows Hello controversy of the month! Windows AI agent in Settings and Recall export experience in Dev/Beta channels - plus the old clock is back, baby July Patch Tuesday preview: App defaults (EEA only), Share images with visual preview, and some fixes for Windows 11 (The first one is coming to Windows 10 too - tied to the DMA news from last week.) Commentary: What Apple gets right in macOS 26 (and otherwise) Surface One year with Surface Laptop 7 Microsoft issues its first firmware updates for Surface Pro 11 and Surface Laptop 7 in several months, sort of Microsoft 365 BBB complains about how Microsoft promotes Microsoft 365; Microsoft disagrees but will change the way it communicates about these features AI OpenAI, Microsoft, and... the nuclear option?? The Open AI Files provides an insider view of the company and finds it lacking Copilot Vision is GA in the United States - It's also free to try on mobile The Browser Company starts explaining Dia, finally Xbox and Games Microsoft announces (extends?) partnership with AMD on future Xbox hardware - a one minute video with plenty to parse Next-gen hardware Multi-year partnership with AMD on Xbox consoles and gaming handhelds Compatibility with existing game libraries Working closely with the Windows team, ensure Windows is the number one games platform Microsoft shares Xbox Ally details with devs, a hint at the coming Windows-based Xbox platform requirements? More Game Pass titles for June, including an old favorite Minecraft gets three great updates Steam will run natively on Apple Silicon soon. Unlike all the games. Tips and Picks Tip of the week: Don't give in App pick of the week: Camtasia online RunAs Radio this week: SQL Server 2025 with Bob Ward Brown liquor pick of the week: The Macallan 18 Sherry Oak Cask Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: uscloud.com
EP 247. ... and in this update, Microsoft has updated Windows Hello to require both infrared and color cameras for facial authentication, improving security by addressing a spoofing vulnerability, though it now requires visible lighting. This increases biometric reliability and inconvenience to users in low-light settings. Consider exploring alternative operating systems like Linux for flexible authentication options. Aim Labs identified and helped patch 'EchoLeak,' a zero-click vulnerability in Microsoft 365 Copilot that risked data exfiltration via malicious emails, highlighting the need for stonking great AI guardrails.Denmark is shifting from Microsoft Office and Windows to LibreOffice and Linux to enhance digital sovereignty and reduce reliance on foreign technology, driven by security, economic, and geopolitical priorities.Chinese AI companies are bypassing U.S. chip export controls by processing data in third countries like Malaysia, using suitcases of hard drives to transport AI-training data.Mattel has teamed up with OpenAI to develop AI-enhanced toys, promising safe, engaging, and age-appropriate experiences, with the first product set to launch later this year.Apple's new passkey import/export feature, built on FIDO Alliance standards, enables secure credential transfers across platforms, boosting interoperability while maintaining biometric security.This advances user convenience and cross-ecosystem flexibility. Now you can adopt passkeys to streamline secure authentication across your devices and platforms. A data broker owned by major U.S. airlines sold passenger flight data to DHS, prompting privacy concerns as agencies track travel without disclosing data sources.WhatsApp will begin displaying ads in its Updates section, using limited user data like location for targeting, while preserving end-to-end encryption for chats and messages.INTERPOL's Operation Secure dismantled over 20,000 malicious IPs linked to 69 malware variants, arresting 32 suspects and seizing significant data to curb phishing and fraud.Find the full transcript for this podcast here.
No, it's not you. Windows Hello doesn't work in the dark anymore. For reasons. Say "Hello" to the Windows Hello controversy of the month! Windows AI agent in Settings and Recall export experience in Dev/Beta channels - plus the old clock is back, baby July Patch Tuesday preview: App defaults (EEA only), Share images with visual preview, and some fixes for Windows 11 (The first one is coming to Windows 10 too - tied to the DMA news from last week.) Commentary: What Apple gets right in macOS 26 (and otherwise) Surface One year with Surface Laptop 7 Microsoft issues its first firmware updates for Surface Pro 11 and Surface Laptop 7 in several months, sort of Microsoft 365 BBB complains about how Microsoft promotes Microsoft 365; Microsoft disagrees but will change the way it communicates about these features AI OpenAI, Microsoft, and... the nuclear option?? The Open AI Files provides an insider view of the company and finds it lacking Copilot Vision is GA in the United States - It's also free to try on mobile The Browser Company starts explaining Dia, finally Xbox and Games Microsoft announces (extends?) partnership with AMD on future Xbox hardware - a one minute video with plenty to parse Next-gen hardware Multi-year partnership with AMD on Xbox consoles and gaming handhelds Compatibility with existing game libraries Working closely with the Windows team, ensure Windows is the number one games platform Microsoft shares Xbox Ally details with devs, a hint at the coming Windows-based Xbox platform requirements? More Game Pass titles for June, including an old favorite Minecraft gets three great updates Steam will run natively on Apple Silicon soon. Unlike all the games. Tips and Picks Tip of the week: Don't give in App pick of the week: Camtasia online RunAs Radio this week: SQL Server 2025 with Bob Ward Brown liquor pick of the week: The Macallan 18 Sherry Oak Cask Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: uscloud.com
Timestamps: 0:00 C'mon pull up a stool 0:10 Trump Mobile, T1 Phone 1:51 Windows Hello in the dark, Vista sound 2:57 TikTok AI Ads, WhatsApp ads, Reddit ads 4:02 Ground News! 5:02 QUICK BITS INTRO 5:11 Intel Nova Lake-S, Core 5 120F 5:52 Switch 2 sleep, ethernet port issue 6:38 23andMe founder buys assets back 7:12 Etsy cracks down on 3D-printed stuff 7:40 Nexusmods sold NEWS SOURCES: https://lmg.gg/NHhgP Learn more about your ad choices. Visit megaphone.fm/adchoices
El viernes 11 por la noche se dio a conocer que el Gobierno de Estados Unidos, exime de los aranceles a los smartphones, computadoras, y muchos más productos de tecnología, Apple feliz, ademas; Samsung decepciona y pausa la actualizacion de One Ui 7 y Android 15; La actualización de abril de Windows 11 está causando problemas en los procesos de inicio de sesión de Windows Hello y como todos los días les solicitamos sus comentarios. Samsung suspende la actualización de One UI 7 y Android 15 https://infosertecla.com/2025/04/14/samsung-suspende-la-actualizacion-de-one-ui-7-y-android-15/ #Samsung y el absurdo motivo por frenar One UI7 https://infosertecla.com/2025/04/14/samsung-y-el-absurdo-motivo-por-frenar-one-ui7/ La actualización de abril de Windows 11 está causando problemas en los procesos de inicio de sesión de Windows Hello https://www.windowslatest.com/2025/04/14/windows-11-kb5055523-install-fails-windows-hello-not-working-april-2025-update-issues/ Trump exime a los teléfonos inteligentes y computadoras de los aranceles masivos de China https://phandroid.com/2025/04/14/trump-exempts-smartphones-and-computers-from-massive-china-tariffs/ Canva ya no es solo para publicaciones bonitas https://www.canva.com/newsroom/news/canva-create-2025/ La aplicación web Apple Maps ya está disponible en todos los dispositivos, incluido Android maps.apple.com ESPERAMOS TUS COMENTARIOS...
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Network Infraxploit Our undergraduate intern, Matthew Gorman, wrote up a walk through of CVE-2018-0171, an older Cisco vulnerability, that is still actively being exploited. For example, VOLT TYPHOON recently exploited this problem. https://isc.sans.edu/diary/Network+Infraxploit+Guest+Diary/31844 Windows Update Issues / Windows 10 Update Microsoft updated its "Release Health" notes with details regarding issues users experiences with Windows Hello, Citrix, and Roblox. Microsoft also released an emergency update for Office 2016 which has stability problems after applying the most recent update. https://support.microsoft.com/en-us/topic/april-8-2025-kb5055523-os-build-26100-3775-277a9d11-6ebf-410c-99f7-8c61957461eb https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#3521 https://support.microsoft.com/en-us/topic/april-10-2025-update-for-office-2016-kb5002623-d60c1f31-bb7c-4426-b8f4-69186d7fc1e5 Dell Updates Dell releases critical updates for it's Powerscale One FS product. In particular, it fixes a default password problem. https://www.dell.com/support/kbdoc/en-us/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities Langflow Vulnerablity (possible exploit scans sighted) CVE-2025-3248 Langflow addressed a critical vulnerability end of March. This writeup by Horizon3 demonstrates how the issue is possibly exploited. We have so far seen one "hit" in our honeypot logs for the vulnerable API endpoint URL. https://www.horizon3.ai/attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/
On Halloween, the last day of October, Microsoft delayed Recall again. It was supposed to preview in October, this is the third delay. No clear reason why. December now, supposedly. Plus, Paul gives an earnings recap that he didn't get to dive into much last week. Windows New 24H2 bug More features coming to Prism emulator in Windows 11 on Arm (!) New generative AI features are coming to Paint, Photos, and Notepad Beta channel: Here's the new Windows Hello experience, with explicit references to passkeys Proton VPN is native on Windows 11 on Arm Windows Server 2025 is GA (and some are being mistakenly force-upgraded. This is what you get when you share a codebase with Windows 11, apparently) Google shifts Android development cycle - Major update each Q2, minor update each Q4, monthly feature/quality updates A Tale of 2 Chips Paul reviewed the AMD Zen 5-based HP OmniBook Ultra, it's awesome. Paul is also reviewing an Intel Lunar Lake laptop, and it is not awesome Early glee around Lunar Lake was misplaced Laptop reviewers all report what Paul is seeing (for once), that the performance is horrific. You need to switch to "Best performance" power management mode for reasonable performance, but this hasn't solved all the issues COD: Black Ops 6. Average FPS under Zen 5 is 90 to 120 at native resolution/medium graphics, single and multi-player. Lunar Lake? 40 FPS with all graphics settings on low/very low Intel now says Lunar Lake is a one-off too (Meteor Lake was likewise a one-off, architecturally). It will no longer package RAM with processors because of margins. Lunar Lake rushed to market and was key contributor to recent financial issues More Earnings Learnings Amazon: $159 billion in revenues, $27.5 billion for AW Apple: $95 billion in revenues, a small uptick in iPhone revenues Microsoft 365/AI Some curious/confusing moves with Microsoft 365 for consumers: subscribers in Australia, New Zealand, Malaysia, Singapore, Taiwan, and Thailand are getting Copilot Pro credits with base subscription (Word, Excel, etc.), Designer, ... and the long-overdue and dreaded price increase This must be a test for the U.S. and western Europe. Feels inevitable OpenAI launches ChatGPT Search. This is not the Google Search replacement you're looking for Xbox It's November, so here's the incredible list of Activision Blizzard games now coming to Game Pass! Just kidding, but we are getting Flight Sim 2024 Microsoft introduced an AI-powered support virtual agent to Xbox because something something AI Switch sales drop off a cliff, Nintendo will announce backward-compatible successor before the end of March Sony launches the PS5 Pro to meh Tips and Picks Tip of the week: Windows 11 minus the MSA App pick of the week: Docs in Proton Drive RunAs Radio this week: Software-Defined Networking using Azure Firewall with Aidan Finn Brown liquor MOVIE pick of the week: Whisky Galore Hosts: Leo Laporte and Paul Thurrott Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: Melissa.com/twit 1password.com/windowsweekly lookout.com threatlocker.com
On Halloween, the last day of October, Microsoft delayed Recall again. It was supposed to preview in October, this is the third delay. No clear reason why. December now, supposedly. Plus, Paul gives an earnings recap that he didn't get to dive into much last week. Windows New 24H2 bug More features coming to Prism emulator in Windows 11 on Arm (!) New generative AI features are coming to Paint, Photos, and Notepad Beta channel: Here's the new Windows Hello experience, with explicit references to passkeys Proton VPN is native on Windows 11 on Arm Windows Server 2025 is GA (and some are being mistakenly force-upgraded. This is what you get when you share a codebase with Windows 11, apparently) Google shifts Android development cycle - Major update each Q2, minor update each Q4, monthly feature/quality updates A Tale of 2 Chips Paul reviewed the AMD Zen 5-based HP OmniBook Ultra, it's awesome. Paul is also reviewing an Intel Lunar Lake laptop, and it is not awesome Early glee around Lunar Lake was misplaced Laptop reviewers all report what Paul is seeing (for once), that the performance is horrific. You need to switch to "Best performance" power management mode for reasonable performance, but this hasn't solved all the issues COD: Black Ops 6. Average FPS under Zen 5 is 90 to 120 at native resolution/medium graphics, single and multi-player. Lunar Lake? 40 FPS with all graphics settings on low/very low Intel now says Lunar Lake is a one-off too (Meteor Lake was likewise a one-off, architecturally). It will no longer package RAM with processors because of margins. Lunar Lake rushed to market and was key contributor to recent financial issues More Earnings Learnings Amazon: $159 billion in revenues, $27.5 billion for AW Apple: $95 billion in revenues, a small uptick in iPhone revenues Microsoft 365/AI Some curious/confusing moves with Microsoft 365 for consumers: subscribers in Australia, New Zealand, Malaysia, Singapore, Taiwan, and Thailand are getting Copilot Pro credits with base subscription (Word, Excel, etc.), Designer, ... and the long-overdue and dreaded price increase This must be a test for the U.S. and western Europe. Feels inevitable OpenAI launches ChatGPT Search. This is not the Google Search replacement you're looking for Xbox It's November, so here's the incredible list of Activision Blizzard games now coming to Game Pass! Just kidding, but we are getting Flight Sim 2024 Microsoft introduced an AI-powered support virtual agent to Xbox because something something AI Switch sales drop off a cliff, Nintendo will announce backward-compatible successor before the end of March Sony launches the PS5 Pro to meh Tips and Picks Tip of the week: Windows 11 minus the MSA App pick of the week: Docs in Proton Drive RunAs Radio this week: Software-Defined Networking using Azure Firewall with Aidan Finn Brown liquor MOVIE pick of the week: Whisky Galore Hosts: Leo Laporte and Paul Thurrott Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: Melissa.com/twit 1password.com/windowsweekly lookout.com threatlocker.com
On Halloween, the last day of October, Microsoft delayed Recall again. It was supposed to preview in October, this is the third delay. No clear reason why. December now, supposedly. Plus, Paul gives an earnings recap that he didn't get to dive into much last week. Windows New 24H2 bug More features coming to Prism emulator in Windows 11 on Arm (!) New generative AI features are coming to Paint, Photos, and Notepad Beta channel: Here's the new Windows Hello experience, with explicit references to passkeys Proton VPN is native on Windows 11 on Arm Windows Server 2025 is GA (and some are being mistakenly force-upgraded. This is what you get when you share a codebase with Windows 11, apparently) Google shifts Android development cycle - Major update each Q2, minor update each Q4, monthly feature/quality updates A Tale of 2 Chips Paul reviewed the AMD Zen 5-based HP OmniBook Ultra, it's awesome. Paul is also reviewing an Intel Lunar Lake laptop, and it is not awesome Early glee around Lunar Lake was misplaced Laptop reviewers all report what Paul is seeing (for once), that the performance is horrific. You need to switch to "Best performance" power management mode for reasonable performance, but this hasn't solved all the issues COD: Black Ops 6. Average FPS under Zen 5 is 90 to 120 at native resolution/medium graphics, single and multi-player. Lunar Lake? 40 FPS with all graphics settings on low/very low Intel now says Lunar Lake is a one-off too (Meteor Lake was likewise a one-off, architecturally). It will no longer package RAM with processors because of margins. Lunar Lake rushed to market and was key contributor to recent financial issues More Earnings Learnings Amazon: $159 billion in revenues, $27.5 billion for AW Apple: $95 billion in revenues, a small uptick in iPhone revenues Microsoft 365/AI Some curious/confusing moves with Microsoft 365 for consumers: subscribers in Australia, New Zealand, Malaysia, Singapore, Taiwan, and Thailand are getting Copilot Pro credits with base subscription (Word, Excel, etc.), Designer, ... and the long-overdue and dreaded price increase This must be a test for the U.S. and western Europe. Feels inevitable OpenAI launches ChatGPT Search. This is not the Google Search replacement you're looking for Xbox It's November, so here's the incredible list of Activision Blizzard games now coming to Game Pass! Just kidding, but we are getting Flight Sim 2024 Microsoft introduced an AI-powered support virtual agent to Xbox because something something AI Switch sales drop off a cliff, Nintendo will announce backward-compatible successor before the end of March Sony launches the PS5 Pro to meh Tips and Picks Tip of the week: Windows 11 minus the MSA App pick of the week: Docs in Proton Drive RunAs Radio this week: Software-Defined Networking using Azure Firewall with Aidan Finn Brown liquor MOVIE pick of the week: Whisky Galore Hosts: Leo Laporte and Paul Thurrott Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: Melissa.com/twit 1password.com/windowsweekly lookout.com threatlocker.com
On Halloween, the last day of October, Microsoft delayed Recall again. It was supposed to preview in October, this is the third delay. No clear reason why. December now, supposedly. Plus, Paul gives an earnings recap that he didn't get to dive into much last week. Windows New 24H2 bug More features coming to Prism emulator in Windows 11 on Arm (!) New generative AI features are coming to Paint, Photos, and Notepad Beta channel: Here's the new Windows Hello experience, with explicit references to passkeys Proton VPN is native on Windows 11 on Arm Windows Server 2025 is GA (and some are being mistakenly force-upgraded. This is what you get when you share a codebase with Windows 11, apparently) Google shifts Android development cycle - Major update each Q2, minor update each Q4, monthly feature/quality updates A Tale of 2 Chips Paul reviewed the AMD Zen 5-based HP OmniBook Ultra, it's awesome. Paul is also reviewing an Intel Lunar Lake laptop, and it is not awesome Early glee around Lunar Lake was misplaced Laptop reviewers all report what Paul is seeing (for once), that the performance is horrific. You need to switch to "Best performance" power management mode for reasonable performance, but this hasn't solved all the issues COD: Black Ops 6. Average FPS under Zen 5 is 90 to 120 at native resolution/medium graphics, single and multi-player. Lunar Lake? 40 FPS with all graphics settings on low/very low Intel now says Lunar Lake is a one-off too (Meteor Lake was likewise a one-off, architecturally). It will no longer package RAM with processors because of margins. Lunar Lake rushed to market and was key contributor to recent financial issues More Earnings Learnings Amazon: $159 billion in revenues, $27.5 billion for AW Apple: $95 billion in revenues, a small uptick in iPhone revenues Microsoft 365/AI Some curious/confusing moves with Microsoft 365 for consumers: subscribers in Australia, New Zealand, Malaysia, Singapore, Taiwan, and Thailand are getting Copilot Pro credits with base subscription (Word, Excel, etc.), Designer, ... and the long-overdue and dreaded price increase This must be a test for the U.S. and western Europe. Feels inevitable OpenAI launches ChatGPT Search. This is not the Google Search replacement you're looking for Xbox It's November, so here's the incredible list of Activision Blizzard games now coming to Game Pass! Just kidding, but we are getting Flight Sim 2024 Microsoft introduced an AI-powered support virtual agent to Xbox because something something AI Switch sales drop off a cliff, Nintendo will announce backward-compatible successor before the end of March Sony launches the PS5 Pro to meh Tips and Picks Tip of the week: Windows 11 minus the MSA App pick of the week: Docs in Proton Drive RunAs Radio this week: Software-Defined Networking using Azure Firewall with Aidan Finn Brown liquor MOVIE pick of the week: Whisky Galore Hosts: Leo Laporte and Paul Thurrott Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: Melissa.com/twit 1password.com/windowsweekly lookout.com threatlocker.com
On Halloween, the last day of October, Microsoft delayed Recall again. It was supposed to preview in October, this is the third delay. No clear reason why. December now, supposedly. Plus, Paul gives an earnings recap that he didn't get to dive into much last week. Windows New 24H2 bug More features coming to Prism emulator in Windows 11 on Arm (!) New generative AI features are coming to Paint, Photos, and Notepad Beta channel: Here's the new Windows Hello experience, with explicit references to passkeys Proton VPN is native on Windows 11 on Arm Windows Server 2025 is GA (and some are being mistakenly force-upgraded. This is what you get when you share a codebase with Windows 11, apparently) Google shifts Android development cycle - Major update each Q2, minor update each Q4, monthly feature/quality updates A Tale of 2 Chips Paul reviewed the AMD Zen 5-based HP OmniBook Ultra, it's awesome. Paul is also reviewing an Intel Lunar Lake laptop, and it is not awesome Early glee around Lunar Lake was misplaced Laptop reviewers all report what Paul is seeing (for once), that the performance is horrific. You need to switch to "Best performance" power management mode for reasonable performance, but this hasn't solved all the issues COD: Black Ops 6. Average FPS under Zen 5 is 90 to 120 at native resolution/medium graphics, single and multi-player. Lunar Lake? 40 FPS with all graphics settings on low/very low Intel now says Lunar Lake is a one-off too (Meteor Lake was likewise a one-off, architecturally). It will no longer package RAM with processors because of margins. Lunar Lake rushed to market and was key contributor to recent financial issues More Earnings Learnings Amazon: $159 billion in revenues, $27.5 billion for AW Apple: $95 billion in revenues, a small uptick in iPhone revenues Microsoft 365/AI Some curious/confusing moves with Microsoft 365 for consumers: subscribers in Australia, New Zealand, Malaysia, Singapore, Taiwan, and Thailand are getting Copilot Pro credits with base subscription (Word, Excel, etc.), Designer, ... and the long-overdue and dreaded price increase This must be a test for the U.S. and western Europe. Feels inevitable OpenAI launches ChatGPT Search. This is not the Google Search replacement you're looking for Xbox It's November, so here's the incredible list of Activision Blizzard games now coming to Game Pass! Just kidding, but we are getting Flight Sim 2024 Microsoft introduced an AI-powered support virtual agent to Xbox because something something AI Switch sales drop off a cliff, Nintendo will announce backward-compatible successor before the end of March Sony launches the PS5 Pro to meh Tips and Picks Tip of the week: Windows 11 minus the MSA App pick of the week: Docs in Proton Drive RunAs Radio this week: Software-Defined Networking using Azure Firewall with Aidan Finn Brown liquor MOVIE pick of the week: Whisky Galore Hosts: Leo Laporte and Paul Thurrott Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsors: Melissa.com/twit 1password.com/windowsweekly lookout.com threatlocker.com
Stargazer Goblin hosts malicious code repositories on GitHub. Crowdstrike blames buggy validations checks for last week's major incident. The Breachforums database reveals threat actor OPSEC. Windows Hello for Business (WHfB) was found vulnerable to downgrade attacks. A medical center in the U.S. Virgin Islands is hit with ransomware. Interisle analyzes the phishing landscape. The FTC orders eight companies to explain algorithmic pricing. Meta cracks down on the Nigerian Yahoo Boys. A fake IT worker gets caught in the act. My conversation with Nic Fillingham and Wendy Zenone, co-hosts of Microsoft Security's "The Bluehat Podcast.” Researchers wonder if proving you're human proves profitable for Google. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Nic Fillingham and Wendy Zenone, co-hosts of Microsoft Security's "The Bluehat Podcast," talking about what to expect on Bluehat on the N2K media network. You can catch the podcast every other Wednesday. Their latest episode launching today can be found here. Selected Reading A Hacker ‘Ghost' Network Is Quietly Spreading Malware on GitHub (WIRED) CrowdStrike blames test software for taking down 8.5 million Windows machines (The Verge) BreachForums v1 database leak is an OPSEC test for hackers (Bleeping Computer) Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication (Dark Reading) Schneider Regional Medical Center hit by ransomware attack (Beyond Machines) New phishing report names and shames TLDs, registrars (The Verge) FTC Issues Orders to Eight Companies Seeking Information on Surveillance Pricing (FTC) Meta bans 63,000 accounts belonging to Nigeria's sextortionist Yahoo Boys (The Record) How a North Korean Fake IT Worker Tried to Infiltrate Us (KnowBe4) Forget security – Google's reCAPTCHA v2 is exploiting users for profit (The Register) Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices
The episode begins with a discussion on a vulnerability in Microsoft's Windows Hello for Business authentication model, which has been found to be susceptible to downgrade attacks. Microsoft has released a fix for this issue to enhance security measures. Additionally, the episode highlights AT&T's decision to pay a ransom to prevent the exposure of stolen call records, shedding light on the prevalent trend of companies paying ransoms after cyber attacks.The episode also delves into Switzerland's groundbreaking law, mandating the use of open-source software in the public sector to promote transparency and security. Furthermore, the Cybersecurity and Infrastructure Security Agency (CISA) has published a playbook for resilience planning in critical infrastructure, emphasizing the importance of enhancing security measures and minimizing the impact of cyber attacks. The episode also discusses leadership changes at CISA, with Brandon Wales stepping down as the executive director and Bridget Bean set to take over in August.In the realm of technology, Google's reversal of its plan to drop support for third-party cookies in Chrome is highlighted, with the introduction of the Privacy Sandbox as an alternative. The episode also explores advancements in AI technology, such as OpenAI's Instruction Hierarchy technique to prevent AI models from being misled and Meta's release of LLAMA 3.1, an open-source AI model with significant parameters. The discussion touches on the growing adoption of generative AI in businesses and the importance of addressing bias and fairness in AI models.Concluding the episode, Dave Sobel emphasizes the significance of strategic decision-making in cybersecurity, advising against paying ransoms and advocating for unique approaches like Switzerland's open-source mandate. The episode underscores the evolving landscape of technology and the need for businesses to adapt to changing trends and security measures. Three things to know today00:00 Cybersecurity in Focus: Windows Hello Fix, AT&T Ransom, Swiss Open-Source Law, and CISA Leadership Changes04:51 Google Reverses Third-Party Cookie Phase-Out: What It Means05:45 OpenAI and Meta's Latest Advances: Instruction Hierarchy, Llama 3.1, and the Business Implications Supported by: https://huntress.com/mspradio/https://timezest.com/mspradio/ All our Sponsors: https://businessof.tech/sponsors/ Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://www.businessof.tech/ Support the show on Patreon: https://patreon.com/mspradio/ Want our stuff? Cool Merch? Wear “Why Do We Care?” - Visit https://mspradio.myspreadshop.com Follow us on:LinkedIn: https://www.linkedin.com/company/28908079/YouTube: https://youtube.com/mspradio/Facebook: https://www.facebook.com/mspradionews/Instagram: https://www.instagram.com/mspradio/TikTok: https://www.tiktok.com/@businessoftechBluesky: https://bsky.app/profile/businessoftech.bsky.social
We're one week into the Copilot+ PC, and the feedback is positive with caution! Key takeaways so far: Much improved performance and reliability, AI features mostly stink, but there is still uncertainty each time you install/do anything. Windows 11 Week D arrives with preview updates for Windows 11 versions 22H2 and 23H2 only The second Patch Tuesday in a row with no 24H2 update (on the day) This preview update adds 24H2 features to 22H2/23H2 as predicted Beta channel (last week): Bizarre Start menu extension for Phone Link users Release preview channel (last week): The 22H2/23H2 builds and features that shipped to stable as a preview update on Tuesday Canary channel (last week): After pausing the previous build (hint: Recall code), new build arrives with drag-and-drop address bar in File Explorer, notification tweaks Copilot+ PC Paul finally got a Copilot+ PC to test, a Lenovo Yoga Slim 7x 14" App compatibility scorecard: Excellent, but with familiar Arm uncertainties Hardware compatibility: Excellent, but with the same person-by-person caveat Gaming: Lots of fiddling, but if you can find a compatible game, some great perf and visual quality. Still better than the Mac, and better than any x64 Ultrabook. But not a gaming PC. No Xbox Game Pass support?? COME ON In-box AI capabilities: With Recall out, there's almost nothing to see here Plus, Intel and AMD are gunning for Qualcomm iFixit reports that Surface Laptop 7/Pro 11 repairability is "astonishingly" good. Granted, the bar was low Microsoft brings Surface Flex Keyboard to Surface Pro 8, 9, and 11 Microsoft releases recovery images for Surface Pro 11/Laptop 7 Windows Hello Enhanced Sign-In Security (ESS) is one of several Copilot+ PC protections that rendered those security researcher complaints about Recall moot. But Paul now has two PCs that use this feature, and it's even more impressive than you think The Windows 11 decoder ring Antitrust As expected, the European Commission announced preliminary charges against Microsoft for Office/Teams bundling This is antitrust, not DMA (like Apple) The EU has not explained WHAT Microsoft can do to fix this (unlike with Apple) This is based on a complaint from Slack, which was created 7 years after Microsoft first offered this type of app/service Xbox -Hot off a terrific Xbox Games Showcase event, Xbox promises its "biggest-ever" booth at Gamescom 2024 (which is now the biggest trade show in Europe, apparently) -Microsoft details how Auto SR and Prism work in WOA11 to make gaming both possible and decent -Steam Deck LCD models are on sale Tips and Picks -App pick of the week #1: New browser upgrades -App pick of the week: Proton Drive -RunAs Radio this week: The Hard Part of Machine Learning with Lynn Langit -Brown liquor pick of the week: Cragganmore 12 Hosts: Paul Thurrott, Richard Campbell, and Mikah Sargent Download or subscribe to this show at https://twit.tv/shows/windows-weekly Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Sponsor: 1password.com/windowsweekly
Rich mentioned two helpful travel sites in his Newsletter: PointsYeah allows you to search across multiple points and rewards programs at once for flights and hotels, and Turbli allows you to check the turbulence forecast for your flight.Rich says the Nothing Ear buds are excellent.Rich talked about portable chargers for your smartphone. The more mAh, the more charges you'll get (10,000 is a good bet); look for USB-C charging in AND out for faster charging. Anker and Belkin are good bets.Keith in Andover, Kansas wants to know which AI to use. Rich likes ChatGPT for general, overall chatbot activities, Gemini for access to real-time information and the web, Claude for excellent language and summarization skills, CoPilot for creativity and Perplexity AI for “book reports” on a topic.Roxton in Ventura is having issues with his Moto 5G.Instagram is testing unskippable ads.Netflix is ending support for second and third-generation Apple TVs on July 31, 2024.Jay from Woodland Hills has a Samsung S10 and wants to put an AirTag equivalent in his car and wants to know which one. You want a tag that works on Android's Find My Device network. Rich says to look at Chipolo and Pebblebee but the shipping times are delayed.Sean in La Costa, CA wants to switch back to an Android after using an iPhone for a bit. Rich recommends iMazing, AltTunes and SMS Backup & Restore.Apple says it will support the iPhone 15 and later models for at least 5 years, but historically, they have done software updates for six years.Rich highly recommends the $500 Pixel 8a if you want a great smartphone with clean software and an excellent camera.Carol in Los Angeles is wondering how she should protect her credit and identity. Rich mentioned WalletHub and AnnualCreditReport.com and consider freezing credit reports. You can also request your Lexis Nexus profile.Drew Binsky, a travel YouTuber who has visited every country in the world, will discuss his new book called Just Go. He mentioned tech tools including Google Maps Offline Mode, Airalo for eSIMs, GetYourGuide and ToursByLocals.Mark in Winnekta is having issues with YouTube saying he's using an ad blocker.Microsoft is listening to consumers and changing the way its upcoming AI feature called Recall works. It will now be opt-in instead of turned on by default, and you have to use Windows Hello to access it.Rich mentioned reading a hard-cover book for the first time in a long time. It's Eruption by Michael Crichton and James Patterson.Adobe says it does not claim ownership over customer work, clarifying new terms of service that upset many users.Apple Watch now pairs directly with the Dexcom G7.Mahboud and Nicky Zabetian, creators of the Kini wireless motion sensor. Use code RADIO for a discount.Ebay will no longer accept American Express as of August 17, 2024.Max is raising prices, and Spotify is too.BBB warns that phishing scams are up and offers ways to spot them. Get full access to Rich on Tech at richontech.tv/subscribe