Microsoft

Microsoft Defender Exception List, Hackers Can Use To Skip Detection

Published

4 months ago

January 20, 2022

Microsoft Defender Exception List, Hackers Can Use To Skip Detection

Hackers could take advantage of a recently discovered vulnerability in the Microsoft Defender antivirus on Windows, to learn where to exclude antivirus scanning and implant malware there.

This vulnerability lies in the Microsoft Defender exception list feature. Interestingly, this problem has actually been around for eight years, and it has had an impact on Windows 10 21H1 and Windows 10 21H2.

As with other antivirus programs, Microsoft Defender has a feature that allows users to add a local or network location on their device that would be excluded from malware scanning.

Users will generally make this exception to prevent the antivirus from scanning certain files or folders, which can interfere with the functionality of the application because it is considered and detected as malware.

Since this list of scan exceptions differs from user to user, this could be information that hackers can use to attack systems, as it gives them a location where they can store malicious files without fear of being detected by an antivirus.

Security researchers have listed some locations that are usually excluded from unprotected Microsoft Defender scans and many local users can access them. Regardless of the permissions they have, local users can find out registry keys and learn paths that don’t allow Microsoft Defender to check for malware or other malicious files.

Antonio Cocomazzi, the researcher from SentinelOne who reported the vulnerability which was later named RemotePotatoo, said that there is no protection for this information, which can be considered sensitive information, and those who run the reg query command, can get everything that is excluded for the Microsoft Defender scan, whether it’s a file, folder, extension or process.

Another security expert, Nathan McNulty confirmed that this issue exists in Windows 10 versions 21H1 and 21H2 but has no impact on Windows 11. He also confirmed that anyone can retrieve the exception list from the registry with entries stored in Group Policy settings. This information is more sensitive because it provides a list of exceptions for multiple computers.

While hackers need local access to get to the Microsoft Defender exception list, so far it can still be a serious threat. Many hackers have been in compromised corporate networks looking for ways to move laterally as comfortably as possible.

Microsoft

Microsoft Releases Windows 11 Insider Build 25120 For Insider Dev Channel

Published

5 days ago

May 18, 2022

The Digit News

How to Remove Ad Banners in Windows 11 File Explorer

Last week, Microsoft started releasing Windows 11 Insider Dev Build 25115 (Sun Valley 3) for Insider Dev Channel users, and this week, there’s a new build number 25120 which certainly brings new capabilities and fixes for Windows 11 Insider users.

One of the new things introduced in Windows 11 build 25120 is that now ARM64 users can update their system to this build, users just need to go to Settings > Windows Update > Check for updates and please download Windows 11 build 25120 which is available there.

In addition, on the Desktop, Microsoft has also added interactive content in the form of a search box that you can use to search for something on the internet.

However, based on circulating information, this feature forces users to use Microsoft Edge as their default browser, and users cannot use other browsers even though the default browser is not Microsoft Edge.

Well besides that based on information from the Microsoft page, there are a number of improvements that are also presented in this new build, which include:

Suggested actions should appear for more date and time formats now.
Addressed some issues with certain formats when copying the date and/or time.
Improved overall performance and reliability of the feature.
Fixed an issue that could crash Settings when opening and looking at the battery usage graph.
Improved performance of displaying Wi-Fi networks after enabling Wi-Fi from the Wi-Fi section of Quick Settings.
Addressed an issue leading to some unreadable text on the Performance page when a contrasting theme was enabled.
Fixed an issue that could cause Windows Update to stall and roll back updates for WSA users.
Did some work to address a stutter in the progress wheel animation when upgrading to a new build.
Some games that use Easy Anti-Cheat may crash or cause your PC to bug check.
Certain apps on full screen (eg, video players) prevent live captions from being visible.
Certain apps positioned near the top of the screen and closed before live captions are run will re-launch behind the live captions window positioned at the top. Use the system menu (ALT + Spacebar) while the app has focus to move the app’s window further down.

On the same page, Microsoft also explained that the Insider Dev Channel will get a number of new features and experiences that may never be released, so all the features presented in this build are experimental and Microsoft is waiting for feedback from Insiders whether in the future it will release features. or not at all, including the Interactive Content features mentioned above.

For you Insider Dev Channel users, you can just go to the Settings > Windows Update page and please download Windows 11 build 25120 which is available there.

Via : Microsoft

Microsoft

Again, Here’s Leaked One Outlook, Email Client For Windows 11

Published

2 weeks ago

May 8, 2022

The Digit News

Here's Leaked One Outlook, Email Client For Windows 11

As previously reported, Microsoft is developing a new Mail Client that aims to replace all existing Mail Clients, including Outlook Web, Outlook from Microsoft Office, and Mail & Calendar that comes preinstalled with Windows 10.

Now, after we could see leaks about this application, recently Windows Central shared more pictures about the application called One Outlook, and here are additional pictures.

Exactly as in the picture you can see above, this One Outlook application certainly has support for Dark Mode as well, apart from that the overall appearance of the application is similar to the Outlook for a Web application.

Although it looks similar to Outlook for Web, it is not a UWP or PWA application, as according to @jessejarvi ‘s explanation, the application is a Win32 application and not a UWP application.

“It’s a separate, standalone Win32 app. RIP UWP. It will replace the people/contacts/mail app tho. And maybe even the Office suite Outlook.” Ungkap @jessejarvi.

And of course, because it’s not a UWP application, we can access it without having to have internet, that’s what Microsoft has to say about native features such as offline stores that are present in this application.

You Can Try It Now!

If you are interested, you can try using this application right now, you just need to download the installer on the following Microsoft page, then install the application as usual.

I will post an article about the first impression after I try this application, so stay tuned on Windows Portal Indonesia.

Via: Windows Central

Microsoft

Microsoft Releases Update KB5013283 For Windows 11 Insider Dev Channel Users

Published

2 months ago

March 26, 2022

The Digit News

Microsoft Release Windows 11 Insider Build 22581

Today Microsoft released update KB5013283 for Windows 11 Insider Dev Channel users; this update will bring the OS Build to 22581,100, and although it is not a big update, there is one thing that is quite interesting present in this update.

As we already know, yesterday at Build 22579, Microsoft removed the Tabs feature in File Explorer, so for insider users who updated their system to Build 22579, they won’t be able to activate this feature even with ViveTool.

And with the presence of this KB5013283 update, it seems that Microsoft is bringing this feature back for users to activate using ViveTool again.

Well, even so, unfortunately, because once again this is an Insider Dev Channel, maybe this feature will be removed later because, based on rumors circulating, the Tabs feature in File Explorer is planned to be present in Windows 11 Sun Valley 3 or 23H2 later.

However, based on the news of several users, this update is also presented for Insider Beta Channel users so that you can re-enable the Tab feature in File Explorer in both the Dev and Beta Channels; if you are curious, you can follow these steps: Step 1. Make sure you have used Windows 11 Build 22581.100.

Step 2. Download ViVetool on the following GitHub page, then open Command Prompt as Administrator > Go to the Directory where ViVeTool is stored and enter the command > ViVeTool.exe add config 34370472 2

Please try, guys.

Via: DeskModder