Share this article

Latest news

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Windows 10 news recap: Huawei to launch new MateBook devices, Chrome can be used to steal passwords and more

3 min. read

Published onMay 21, 2017

published onMay 21, 2017

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Welcome back to our Windows 10 news recap. We are continuing the trend of our weekly “Windows 10 news recap” series where we go over the top stories of the past week in the world of Microsoft’s flagship operating system.

WikiLeaks releases CIA spyware, known as Athena, that targets all Windows versions from XP to 10

Continuing the trend of the US intelligence agencies treasure trove of tools and exploits being leaked, WikiLeaks has nowpublished details, and a demo, of spyware used by the CIA, that can affect devices from Windows XP to Windows 10.

Huawei to launch new portfolio of MateBook Windows 10 devices next week

Huawei hasconfirmed that it will be launching new devices, and of those devices is a range of new devices in its MateBook line, running Windows 10.

It’s time to maximise your lifestyle. Join us LIVE from Berlin on 23 May 2017 at 14:00 CEST to meet our latest products…#HuaweiMateBookpic.twitter.com/iz9hfEXw7f

— Huawei Mobile (@HuaweiMobile)May 15, 2017

Hackers could use Chrome on Windows 10 to steal passwords – Google is working on a fix

While Microsoft Edge and Internet Explorer are usually the ones being called out for security flaws, this time it is Google’s Chrome web browser. A flawdiscovered in Chrome can be used to steal passwordsstored with the browser, with just a file:

Once downloaded, the request is triggeredthe very moment the download directory is openedin Windows File Explorer to view the file, delete it or work with other files (which is pretty much inevitable).There is no need to click or open the downloaded file – Windows File Explorer will automatically try to retrieve the “icon“.The remote SMB server set up by the attacker is ready to capture the victim’s username and NTLMv2 password hash for offline cracking or relay the connection to an externally available service that accepts the same kind of authentication (e.g. Microsoft Exchange) to impersonate the victim without ever knowing the password.

Currently, the attacker just needs to entice the victim (using fully updated Google Chrome and Windows) to visit his web site to be able to proceed and reuse victim’s authentication credentials. Even if the victim is not a privileged user (for example, an administrator), such vulnerability could pose a significant threat to large organisations as it enables the attacker to impersonate members of the organisation. Such an attacker could immediately reuse gained privileges to further escalate access and perform attacks on other users or gain access and control of IT resources.

Apple makes it easier to install Windows 10 Creators Update on macOS Sierra with Boot Camp

Installing and running the Windows 10 Creators Update on macOS devices running Sierra is now made easier thanks to anupdate by Apple that makes it easier to install via Boot Camp.

That’s the top Windows 10 news for the past week – we’ll be back next week with more.

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Δ

Radu Tyrsina