windows

Microsoft has added rapid reaction to a year-old subscription service that will automatically shut down accounts – logging a user out of all managed apps and services, including those delivered by a third-party – at the first hint of suspicious activity.

The new feature in Cloud App Security (CAS), a security service launched in August 2016, collaborates with Azure Active Directory (AAD), another subscription service, to automatically bump off users behaving unusually and shut down accounts suspected of having been hijacked. CAS is built, at least in part, on technology Microsoft acquired in 2015 when it bought the Israeli cloud security vendor Adallom for $250 million.

To read this article in full or to leave a comment, please click here

It’s still much too early to tell if we’re going to have problems with this month’s Patch Tuesday trove, but one irksome bug has cropped up with the Win10 Anniversary Update cumulative update, KB 4034658 — the one that brings Win10 version 1607 up to build 14393.1593.

When you install KB 4034658, the installer wipes out your Update History (see before and after screenshots).

Woody Leonhard/IDG

We’ve had tons of problems with Automatic Update patches so far this year. If you’ve followed along here, you’ve seen them roll out in real time. With Patch Tuesday coming tomorrow, now is an excellent time to make sure that you have Automatic Update turned off on all of your machines.

What kinds of problems? No patches at all in February, except a surprise late IE/Edge patch for Flash. In March, we got the Win10 patch that broke Microsoft’s Dynamics CRM 2011. In April, there were a host of problems, especially with the .Net patches. Then in June, we saw 16 bad Office security patches roll out of Automatic Update chute, and an IE patch that broke iFrame printing. Last month, Surface Pro 4 customers were treated to a rogue driver patch that broke Windows Hello.

To read this article in full or to leave a comment, please click here

There’s no question that you need to keep your Windows machine patched. In this age of EternalBlue and Shadow Brokers, Wikileaks and the CIA, avoiding Windows security patches is like hanging a sign out on the internet that says, “Kick me.”

That said, there’s no reason for savvy Windows users to succumb to Microsoft’s patching pace. Windows Automatic Update is great — vital — for your sainted aunt Martha, who’s afraid that anything other than playing mahjong will break her computer. But Auto Update’s an unnecessary risk for people who know how to use Windows and who keep up to date on Windows developments. If you’re knowledgeable enough to be reading this, you should seriously consider taking Windows patching into your own hands.

To read this article in full or to leave a comment, please click here