Huge Cortana exploit allowed an attacker to bypass Windows 10’s lock screen

INSUBCONTINENT EXCLUSIVE:
Windows 10 users will likely be concerned to hear that Cortana had major vulnerabilities, which allowed a malicious party to potentially
issues.McAfee uncovered and documented the security flaws in a lengthy blog post, with one simple issue being the fact that you could
trigger the voice assistant from the lock screen (assuming Cortana is enabled in this respect, on default settings), and bring up a
revealed in that contextual menu could potentially leak sensitive information from the locked laptop.Beyond that, the security firm found
that it was possible to exploit Cortana in order to execute code on the PC from the lock screen, allowing an attacker to trigger a backdoor
dropped from, say, a previously successful phishing email attack.Moreover, McAfee further demonstrated an exploit of the digital assistant
that allowed a payload to be locally executed from a USB stick, with the result that the attacker could change the login credentials for the
notebook, and get full access to the machine
Highly worrying indeed.Privilege patchAs mentioned at the outset, Microsoft fixed these issues with its freshly released patch for Windows
from user input services without consideration for status
if you do have Cortana running on the lock screen of your PC, this is a pretty critical security patch to download
scratching the surface of potential attack vectors that can be leveraged against digital assistants and via vocal commands, and that the
inexorably heading towards a world in which AI virtual assistants are increasingly used to help you run many aspects of your devices and
operating systems.Some of the best laptops out there use Windows 10 and Cortana