+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [Warning] Windows Login Leaks and Critical Updates (/showthread.php?tid=5369419)
Windows Login Leaks and Critical Updates - Machiavellian101 - Aug 9, 2016
It has recently been discovered that Windows login credential are supposedly getting leaked if you use Internet Explorer or Edge in Windows 10.
This could be potentially be more troublesome for you if you log into Windows with a Microsoft account. The reason being is that lots of people have their Microsoft account shared with other accounts and they tend to use the same password for more than one thing.
What's more is that Microsoft have known about this for a while and instead of trying to patch these things they try and persuade people to use MS products and to sign into Windows with their Microsoft account. Now I don't want to sound like someone against Microsoft but this I find to be bad practice.
Moreover the solution for these problems is simply either avoid using Edge and IE and sign into Windows with a local account which is what I do. However if you still want use Edge or Explorer you can follow the steps on how to protect yourself here: http://www.bleepingcomputer.com/news/security/understanding-the-windows-credential-leak-flaw-and-how-to-prevent-it/
On another note Critical Security updates have just been released and so if you haven't already make sure your systems are update. Find out more here: http://www.bleepingcomputer.com/news/security/august-2016-patch-tuesday-includes-9-security-updates/#cid3124
Regards.
* - webdev77 - Aug 9, 2016
To those who for whatever reason would want to use Edge, disable SMB port numbers 44, 137, 138, and 139. This prevents the outbound SMB connection from being made.