A newly discovered flaw in Windows Out-of-Box-Experience (OOBE) allows attackers to gain full administrative command prompt access during system setup, even when Microsoft’s standard protections are enabled.

RISKS: Backdoor account creation, system changes, persistent access.

MITIGATION:

• Do not leave devices unattended during setup.
• In Intune: Hide reset button on corporate Windows devices to prevent abuse.

Full advisory available on our website. Stay secure, stay informed.