Windows 365 just arrived and it already lets your passwords slip away

Introduced a few weeks ago, Windows 365 promises to be a complete solution for anyone who wants a version of Windows everywhere, available in a variety of ways. With a large number of participants, this may be the number of companies that will start functioning.

Now that it has hit the market, Windows 365 already seems to be under fire and being evaluated from a security standpoint. The latest discovery showed that it is very easy to crack Azure passwords.

Although it is still known to users, Windows 365 should have no secrets to use the very famous base. This is a version of Windows 10 that works remotely and is accessible to the browser on any device or platform.

Even though it is a platform similar to many other systems we use on a daily basis, it was already possible to find flaws in the system. This allows you to steal user data as well as gain access to passwords, especially those that guarantee authentication to Azure.

The person who discovered and reported this vulnerability was a prominent security investigator who recently reported other issues. we are talking about Benjamin Delpywhich with its open source tool Mimikatz managed to prove the bankruptcy and how the passwords were stolen.

This tool is known to security researchers for evaluating certain platforms. You can get user passwords by looking at system caches. In this particular case, it was also possible to exploit a vulnerability in Windows Terminal that allows you to see passwords in clear text.

These passwords can be used to access other resources on the network and propagate this attack from one computer to another, while installing ransomware. Benjamin Delphi showed that Windows Hello and others can help prevent this attack, but Windows 365 relies on usernames and passwords and is not easy to protect.

While this is a known Windows flaw, it doesn't make a good impression on Microsoft's new offering. This should be resolved very soon and thus guarantee the necessary security for users and their data.