Microsoft is please to announce the final release of the security configuration baseline settings for Windows 10 version 1511, also known as "November Update," "Build 10586," "Threshold 2," or "TH2." The downloadable attachment to this blog post includes importable GPOs, tools for applying the GPOs to local GPO, custom ADMX files for Group Policy settings, and all the settings in spreadsheet form. We will also be publishing SCM .CAB files for this Windows 10 baseline shortly, and will announce their availability on the Security Guidance blog. (Note that we will not be providing updated SCM .CAB files for the IE11 guidance. For that content, see the attachment on this blog post.)

Source : Microsoft Security Guidance

Read More

Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). It can highlight when a set of Group Policies has redundant settings or internal inconsistencies, and can highlight the differences between versions or sets of Group Policies. It can also compare GPOs against current local policy settings and against local registry settings. And you can export its findings to a Microsoft Excel spreadsheet.

Source : Microsoft Security Guidance

Read More

One of the great additions to PowerShell 5.0 is the new information stream. You can use this stream as a logging mechanism in your scripts and functions, which is something I want to demonstrate today.

Source : Petri

Read More

In the first article of this series, I taught you how to install and configure the Git version control system (VCS) to help you manage your Windows PowerShell scripts. Today, you'll learn how to sync your PowerShell scripts between your computers.

Source : 4sysops

Read More

Software as a service (or SaaS) is a relatively new model of how a lot of software companies are conducting their business today – often to great success. So it comes as no surprise that malware writers and cyber crooks are attempting to adopt this model for their own nefarious purposes. In the past year a whole bunch of these “Ransomware as a Service” campaigns appeared, like for example Tox, Fakben or Radamant. Today we want to spotlight the newest of these campaigns.

Source : Meet Ransom32: The first JavaScript ransomware

Read More

PowerSploit is an offensive security framework for penetration testers and reverse engineers. It was born out of the realization that PowerShell was the ideal post-exploitation utility in Windows due to its ability to perform a wide range of administrative and low-level tasks all without the need to drop malicious executables to disk, thus, evading antivirus products with ease.

Source : PowerShell Magazine

Read More

Below I will show few methods which can prevent WPScan scan.

Source : security.szurek.pl

Read More

Hello everyone, this is Ayesha Mascarenhas on the Remote Desktop team. We released the Remote Desktop client preview for Mac in August this year. Over the last few months many of you have shared feedback and feature suggestions. Today, I’m sharing with you some of the updates we have made to the Remote Desktop client preview app for Mac since it was first released.

Source : Remote Desktop Services (Terminal Services) Team Blog

Read More

In the second week of this month, Microsoft had alerted Windows Live Mail 2012 users that some chnages are coming to users of Microsoft accounts like Outlook, Live, Hotmail, MSN accounts that may prevent mails being delivered to Windows Live Mail 2012. And it said, in order to continue using this Mail client, you need to install this update.(Update for Windows Live Essentials Mail 2012 (KB3093594) )

Source : meraTechPort

Read More

You’ve adopted an Android smart phone, but your contacts, email, and calendaring information are tied up in your Outlook.com or Office 365 account. No worries, you can access it all from Android, and even make sure that your phone calls and text messages correctly identify who’s reaching out to you. 

The best news? You can make this work no matter which apps you choose to use to manage your contacts, email and calendar.

Source : Thurrott.com

Read More

When using WPScan you can scan your WordPress website for known vulnerabilities within the core version, plugins, and themes. You can also find out if any weak passwords, users, and security configuration issues are present. The database atwpvulndb.com is used to check for vulnerable software and the WPScan team maintains the ever-growing list of vulnerabilities. 

Last time, we taught you how to install WPScan on Mac and Linux. 

This time we are going to dive into how to use WPScan with the most basic commands.

Source : Sucuri Blog

Read More

NirSoft released the free MMCSnapInsView tool that allows you to view and launch all MMC snap-ins that are installed on a Windows computer.

Source : MMCSnapInsView – MMC snap-in launcher

Read More

Concurrent Remote Desktop allows you (the administrator) to simultaneously use a client computer while a standard user is still interactively using it. For IT, this is huge! Imagine never having to kick a person off of their computer because you need to work on it. Concurrent Remote Desktop (CRDP) makes this possible. This guide will cover CRDP setup for Windows 10.

Source : DeployHappiness

Read More

About 4 months ago we decided to deliver what the community clearly needs: A WordPress Security Learning Center. We all put our noses to the grindstone and worked as quickly and effectively as we could. We brought in video producers, designers, copywriters and security experts from around the community.
Today we are ready to announce the completion and official launch of our WordPress Security Learning Center.

Source : Wordfence

Read More

Microsoft released KB 3095113 to enable future Windows 10 feature upgrades. Whether you will deploy upgrades or not, you need to know what this hotfix does and how not applying it can break WSUS.

Source : 4sysops

Read More

Well today's news gives WLW a fresh lease on life as open source software. That means the opportunity is once again available to build a robust community around the software and see it thrive.

Source : SuperSite for Windows

Read More

A must read article by 4sysops on how to active the administrator account or change the password of any account without logging in !
Offline activate the built-in administrator on Windows 10 without signing in - 4sysops

Read More

If you tried out the previews of Windows 10, you may have seen the experimental options in the command prompt. Now that it's released, the Experimental tab in the Properties dialog is gone, but the key features are still there – just slotted into the other tabs.

To see what's available, right-click on the title bar of a command prompt window and choose Properties if you want to only change the current command window, or Defaults if you want to change every command window you open.

Source : www.techradar.com

Read More

Windows 10 Enterprise comes with quite a few interesting features that Windows 10 Pro lacks. In this post, I summarize these additional features and link to further information.

Source : 4sysops

Read More

I don’t know about you, but I’m sick and tired of reading these sensational headlines: “Windows 10 is Stealing Your Bandwidth!” and “Windows 10 is Costing You Extra Money!” and so forth. By the end of this article, you’ll understand a thing or two about Windows Update Delivery Optimization (WUDO), how to control its behavior, and what you can do to minimize the likelihood of running over your ISP account’s bandwidth limit.

Source  : 4sysops

Read More