MCPmag. com is the brand behind Microsoft Certified Professional Magazine Online. They provide a wealth of information and resources for IT professionals, focusing on desktops, servers, PowerShell, cloud, security, and more.

One of their recent advisories highlights a critical vulnerability in Windows 10 client operating systems, known as 'SeriousSAM' or 'HiveNightmare. ' This elevation-of-privilege vulnerability (CVE-2021-36934) allows attackers to run arbitrary code with SYSTEM privileges. The root cause is overly permissive Access Control Lists (ACLs) for system files, including the Security Accounts Manager (SAM) database.

While Microsoft is currently investigating the issue, there is no patch available. In the meantime, MCPmag. com offers a two-step workaround: restricting access and deleting shadow copies to prevent exploits.

However, it's worth noting that deleting shadow copies may impact restore operations. With MCPmag. com, IT professionals can stay informed about the latest security advisories, workarounds, and best practices to safeguard their Windows systems.

Their comprehensive coverage and expert insights make them a trusted resource in the IT community