DPAPI security flaw in Windows 10
My brief understanding.  If you have auto login enabled, it is possible to gain access to an account secrets stored in a security store.  That sounds bad, but with auto login you are already unlocking an account.  No CVE posted.  No description of mitigation.  A hostile view of Microsoft in closing remarks.<p>Edit: as has been pointed out, this could be triggered by Windows update with a setting enabled <a href="https://support.microsoft.com/en-us/help/4027599/windows-10-automatically-finish-setting-up-pc-after-update-restart" rel="nofollow">https://support.microsoft.com/en-us/help/4027599/windows-10-...</a>