DPAPI security flaw in Windows 10
My brief understanding.  If you have auto login enabled, it is possible to gain access to an account secrets stored in a security store.  That sounds bad, but with auto login you are already unlocking an account.  No CVE posted.  No description of mitigation.  A hostile view of Microsoft in closing remarks.Edit: as has been pointed out, this could be triggered by Windows update with a setting enabled https://support.microsoft.com/en-us/help/4027599/windows-10-...