On the 8th of May, Microsoft finalized an update which started in March 13th by changing the authentification protrocol of the remote desktop sessions.They rolled the final update by disabling the former CREDSSP protocol since an exploit was discovered. (CVE-2018-0886)The exploit allowed to execute remote code a remote system through the logins details provided in a regular remote desktop session.A hacker could therefore gain access to the remote desktop data, programs or even create/ disable new accounts.Since, yesterday the...

Read More