Webshaun

Attached. According to Microsoft the potential risk is "An attacker can exploit this misconfiguration in order to perform path interception to gain escalation of privileges and persistency on the machine."

I just got an alert from Microsoft's security platform that there's a security issue with ESET Endpoint. "Fix unquoted service path for Windows services" on path C:\Program Files\ESET\ESET Security\efwd.exe. In the registry in paths Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\efwd Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\efwd Name: ImagePath Value: C:\Program Files\ESET\ESET Security\efwd.exe This should have quotes. Value should be "C:\Program Files\ESET\ESET Security\efwd.exe" You can manually add quotes to protect yourself immediately.

Yes.

This is something I've been seeing more and more often. ESET interferes with the Office 365 authentication process, which causes a password request loop of authentication failures. Removing ESET is the only permanent solution. Latest version. I've been seeing this for 2 months on 1 home customer computer, now on a domain account business customer today, between both systems, one brand new.