Windows 10: Draft of Microsoft Security Servicing Commitments for Windows

Brink · Jun 13, 2018

Microsoft’s commitment to protecting customers from vulnerabilities in our products, services, and devices includes providing security updates that address these vulnerabilities when they are discovered. We understand that researchers have wanted better clarity around the security features, boundaries and mitigations which exist in Windows and the servicing commitments which come with them. We have drafted a document which better describes the criteria Microsoft Security Response Center (MSRC) uses when determining whether a reported vulnerability will be addressed through servicing, or in the next version of a product. We are sharing the draft copy with the research community and would like feedback before we make the final copy available online. We are primarily interested in feedback around our servicing policies and whether our criteria makes sense to you, the researcher.

Read draft: Microsoft Security Servicing Commitments.pdf
Click to expand...

Source: Draft of Microsoft Security Servicing Commitments for Windows Defense

:)

Brink · Jun 14, 2018

Microsoft: Furthering our commitment to security updates

Microsoft is committed to delivering comprehensive security updates to our customers.

Information about the security updates we release are currently made available on the Microsoft Security Bulletin website. However, our customers have asked for better access to update information, as well as easier ways to customize their view to serve a diverse set of needs.

This month we released a preview of our new single destination for security vulnerability information, the Security Updates Guide. Instead of publishing bulletins to describe related vulnerabilities, the new portal lets our customers view and search security vulnerability information in a single online database.

Using the new portal you can:

Sort and filter security vulnerability and update content, for example, by CVE, KB number, product, or release date.

Filter out products that don’t apply to you, and drill down to more detailed security update information for products that do.

Leverage a new RESTful API to obtain Microsoft security update information. This eliminates the need for you to employ outdated methods like screen-scraping of security bulletin web pages to assemble working databases of necessary and actionable information.

Security update information will be published as bulletins and on the Security Updates Guide until January 2017. After the January 2017 Update Tuesday release, we will only publish update information to the Security Updates Guide.

You can send feedback on the new portal to L: portalfback@microsoft.com.
Click to expand...

Source: Furthering our commitment to security updates MSRC

curatia · Jun 14, 2018

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately: How to fix Cant connect securely to this page in Microsoft Edge unsafe TLS security settings - YouTube

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

Borg 386 · Jun 14, 2018

windows defender & security center services keep turning off

Are you running any other AV or did you have one running in the past? If you didn't use an uninstaller for the AV, then the remnants of it could be causing the problem. Normally any time you install an AV it disables Defender by default.

If you are getting any error codes please list those, that will be helpful in helping you.

As torre suggested, might be a good idea to do a reset or even a reinstall.

Reset Windows 10 - Windows 10 Forums

Windows 10 - Clean Install - Windows 10 Forums

There are also some suggestions listed here:

Unable to turn on Windows Defender in Windows 7 / 8 / 10

Restart Security Center Service As reported in this and this thread, restarting Security Center service can help in solving the problem. To restart Security Center service, follow these steps:

Press Windows key + R. This will open Run. Alternatively, you can go to Start and search for 'Run'.

In Run dialog box, type 'services.msc' and hit enter.

In Services, search for 'Security Center'.

Right click on 'Security Center' and click on 'Restart'.

7. Delete conflicting Registry Entry
Some malwares adds malicious entries in registry that blocks real antiviruses from running. To remove these entries, follow these steps:

Press Windows key + R. This will open Run. Alternatively, you can go to Start and search for 'Run'.

In Run dialog box, type 'regedit' and hit enter. This will open Registry Editor.

In Registry Editor, navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options.

In this key, if you find any entry for MSASCui.exe, MpCmdRun.exe or MsMpEng.exe then right click on it and click on Delete. If you do not find any of these entry then it is normal and you don't need to do anything.

Click to expand...

Windows 10: Draft of Microsoft Security Servicing Commitments for Windows

Draft of Microsoft Security Servicing Commitments for Windows

Draft of Microsoft Security Servicing Commitments for Windows

Draft of Microsoft Security Servicing Commitments for Windows

Draft of Microsoft Security Servicing Commitments for Windows - Similar Threads - Draft Microsoft Security

Committing Windows Updates

Security baseline (DRAFT): Windows 10 and Windows Server version 20H2

Security baseline (DRAFT) for Windows 10 and Windows Server v2004

Security baseline (DRAFT) release for Chromium-based Microsoft Edge 79

Security baseline (DRAFT) for Chromium based Microsoft Edge version 78

Security baseline (DRAFT) for Windows 10 v1809 and Windows Server 2019

Microsoft Security Servicing Criteria for Windows

Microsoft: Furthering our commitment to security updates

Microsoft is committed to the Surface lineup.