Windows 10 Announced - Released 29-Jul-2015

This is great news.

 

"Microsoft telemetry data reveals scale of Petya outbreak, and how Windows 10 security helps...

https://www.neowin.net/news/microso...&utm_campaign=Feed: neowin-main (Neowin News)

Petya's kill-chain diagram, which outlines Windows 10's mitigation techniques (in blue boxes) as well:

https://s3.amazonaws.com/neowin/news/images/uploaded/2017/06/1498824304_02-petya-kill-chain-diagram1_story.jpg

 

All the infected PCs were running Windows 7.

 

I read an article whose comments stated SecureBoot mitigates these attacks in Windows 10 (thanks, HMPA beta builds ). Just has to be enabled in BIOS.

https://arstechnica.com/security/20...seeking-ransomware/?comments=1&post=33572881#

It's in the comments section 3/4 of the way down.

 

Regarding the Anti-Exploit features such as the 20+ process mitigations which are pre-process (with option for full path), there is also a section in the UI for System-Wide mitigations as well which affect all running processes. These system-wide mitigations can be enabled/disabled via the UI now as well. In the Fall Creators Update on 64-bit machines, the following system-wide process mitigations are enabled by default now:

• Control Flow Guard (CFG)
• DEP
• Mandatory ASLR
• Bottom-Up ASLR
• SEHOP
  
• Validate Heap Integrity (Heap Termination on Corruption)

These are enabled by default, system-wide. The system-wide and per-process mitigations both have an option to Export settings as well through the UI, though the export functionality is broken in this build at the moment. Anyway, this is fantastic stuff to see as it progresses.

 

Great, thanks for keeping us updated.

 

I've seen this on the systems of a couple of customers. Why is there a need to review/update the privacy settings before installing the Creators Update?

 

Good to know Microsoft is pushy about its forthcoming Windows 10 update, which won't be available until the fall!

 

I have never seen that before on my machine.

 

"Windows 10 now pushes YOU to upgrade to the latest major update

MICROSOFT will now prompt those running the original version of Windows 10 to update their operating system in an effort to avoid malware.

The Redmond technology company has confirmed that it will be pushing out notification to users still running Windows 10 version 1507.
This notification warns them the software is now deemed "end of service" and will no longer receive monthly security patches.

Microsoft will push users to upgrade the system.

Tapping the handy button included in the new notification will fast-track users to the latest version of the operating system – at present [in September ?], Creators Update.

Users can also dismiss the prompt to upgrade to Windows 10 Creators Update [in September ?], but this cannot be done indefinitely.

Windows 10 users are able to postpone the process up to five times, with the sixth notification pop-up asking users to confirm their privacy settings..."

http://www.express.co.uk/life-style...24032/Windows-10-Download-Update-Notification

 

No nag screens for me. I won't be receiving the next Creators' Update.

 

Yep, one of good things offered by LTSB release

 

If Malwarebytes Anti-Exploit is installed, VBScript in IE 11 is already disabled.

 

Microsoft Confirms Windows 10 New Monthly Charge

https://www.forbes.com/sites/gordon...s-windows-10-new-monthly-charge/#106e75703184

 

That was over a year ago. I'm on Enterprise and I'm not paying a monthly charge.

 

Probably cause you didn't pay for it that way.

 

Was going to say, is this even in effect yet?

 

My take on this is the monthly cost is in addition to any charges by the CSP for managed services. So everyone makes out except the poor SMB.

https://blogs.windows.com/windowsex...d-surface-for-businesses/#CP34KAHOIKhrtkp4.97