Dark Reading | A newly discovered vulnerability in Microsoft's Active Directory Federation Services (ADFS) lets threat actors bypass multifactor authentication (MFA) as long as they have the username and password for another person on the same ADFS service. Microsoft patched the flaw yesterday. Andrew Lee, the security engineer for Okta Research and Exploitation (REX) who discovered the bug, equates it to "turning a room key into a master key for every door in the building — but in this building, each door has a second lock that accepts a passcode."

The Hacker News | Get your update caps on. Yesterday Microsoft released its latest monthly Patch Tuesday update for August 2018, patching a total of 60 vulnerabilities, of which 19 are rated as critical. The updates patch flaws in Microsoft Windows, Edge Browser, Internet Explorer, Office, ChakraCore, .NET Framework, Exchange Server, Microsoft SQL Server, and Visual Studio. Two of these vulnerabilities patched by the tech giant are listed as publicly known and being exploited in the wild at the time of release.

ZDNet | Spectre and Meltdown are more than a new class of security holes. They're deeply embedded in the fundamental design of recent generations of CPUs. So it shouldn't come as any surprise that yet another major Intel chip security problem has been discovered: Foreshadow.

The Verge | Microsoft is rolling out a new folder protection feature for OneDrive. Folder protection will offer to automatically sync your documents, pictures, and desktop folders to OneDrive to ensure a PC’s important folders are backed up to Microsoft’s cloud service. If you use multiple Windows 10 PCs then OneDrive will automatically keep all these folders in sync, which is particularly useful if you’re fond of dropping important documents onto your desktop.

Quartz | Google tracks your location — even when you tell it not to. In order to actually turn off location tracking, users must navigate to a little-known setting called Web & App Activity. Here's how to actually stop the company from tracking your location.

PCWorld | Windows 10 updates whether you want it to or not … unless you know the trick.

InformationWeek | Budget time has been a struggle for IT organizations in recent years as they try to pay for maintaining existing systems, meet new challenges such as growing cybersecurity threats, and invest in digital transformation for the future. Are you ready for IT budget season?

New Atlas | In today's ultra-connected world, with many people often getting work emails sent to their smartphones, a growing number of countries and companies are endorsing "right to disconnect" laws, recreating a much-needed boundary between work and home.

G Suite Updates | Google is adding section layouts to the new Google Sites. You can use these layouts to quickly design pages or sections of pages on your site. This makes it even easier and quicker to create professional-looking websites using the new Sites.

G Suite Updates | To better protect the G Suite data stored on your employees’ personal iOS devices, you can now specify that certain iOS apps be “managed” if your domain has advanced mobile device management enabled. If an app is managed, you can prevent the app’s data from being backed up to iCloud, and block unmanaged apps from opening managed app files.

Atlassian Blog | Atlassian is excited to announce the next milestone in their continued pursuit of Trust: SOC2 Type II certification for the Trust Services Criteria of security, availability, and confidentiality of Jira, Confluence, Stride, and Bitbucket (the first and only Git cloud solution with this certification), as well as ISO27001 and ISO27018 certifications for Jira and Confluence.