A vulnerability was found on Windows Hello for Business.

A vulnerability was found on Windows Hello for Business that can be used by malware.

According to a report by SCWorld website, a vulnerability has been detected on the Windows Hello for Business feature, which is an authentication feature on Windows at the enterprise level. This vulnerability, a cyber researcher, says that hackers or malware can use this vulnerability to silently access Microsoft Entra ID (an account for Windows and Microsoft's cloud as an enterprise employee using Windows at the enterprise level) without interactions with users or administrators.

The researchers explain that using the vulnerability requires the execution of the code Execution on the victim's Active Session to allow the malware code to send a petition to Windows to sign authentication, allowing the malware to receive a token to access the system named Primary Refresh Token (PRT), which hackers can register their machine to access the system, as well as add other authentication methods. The system can be accessed even if the machine is protected by a TPM chip without the theft of a private key, PIN code, or Biomatric authentication is a very insidious method.

But the good news is that hacking is not widely used by hackers, and researchers have successfully reported the existence of such a vulnerability.

# Trending # lemon 8 diary # Windows # helloforbusiness # freedomhack