Followers | 680 |
Posts | 141062 |
Boards Moderated | 36 |
Alias Born | 03/10/2004 |
Friday, March 13, 2020 4:35:48 PM
By: Engadget | March 13, 2020
• It disclosed the critical, "wormable" bug earlier than it wanted.
Microsoft has released an unscheduled patch for a security bug that it accidentally disclosed during the release of its March 2020 patch several days ago. While difficult to exploit, the vulnerability is "critical" because it could allow malicious code to automatically spread from one machine to another. By releasing the fix now, Microsoft aims to avoid a chain reaction scenario that played out with the WannaCry and NotPetya viruses in 2017.
The security hole exists in Microsoft's Server Message block (SMB) protocol on recent 32- and 64-bit versions of Windows 10 both on the client and server sides. Researchers from Microsoft and elsewhere labeled it critical because the compromise of a single machine could compromise others on the same network. Microsoft said that there's no evidence so far that the flaw is being actively exploited, but said it's "more likely" than not to happen in the future.
An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client. To exploit the vulnerability against a server, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv3 server. To exploit the vulnerability against a client, an unauthenticated attacker would need to configure a malicious SMBv3 server and convince a user to connect to it.
Windows 10 has strong defenses that make that scenario unlikely, but motivated and skilled attackers could likely engineer successful attacks. To prevent against that, users (especially those on networks) should install the KB4551762 security update as soon as possible or follow Microsoft's mitigation advice. Most folks should get the patch installed automatically via Windows Update.
Read Full Story »»»
DiscoverGold
Information posted to this board is not meant to suggest any specific action, but to point out the technical signs that can help our readers make their own specific decisions. Caveat emptor!
• DiscoverGold
Recent MSFT News
- Brookfield and Microsoft Collaborating to Deliver Over 10.5 GW of New Renewable Power Capacity Globally • GlobeNewswire Inc. • 05/01/2024 10:30:00 AM
- Alphabet CEO’s Billion-Dollar Wealth, Microsoft’s $1.7B Indonesia Investment, and More News • IH Market News • 04/30/2024 11:58:40 AM
- Axel Springer et Microsoft élargissent leur partenariat dans les domaines de la publicité, de l'IA, du contenu et des services de Microsoft Azure • PR Newswire (Canada) • 04/29/2024 03:00:00 PM
- Axel Springer and Microsoft expand partnership across advertising, AI, content and Azure services • PR Newswire (Canada) • 04/29/2024 03:00:00 PM
- Axel Springer and Microsoft expand partnership across advertising, AI, content and Azure services • PR Newswire (US) • 04/29/2024 03:00:00 PM
- U.S. Stocks May See Further Upside In Early Trading • IH Market News • 04/29/2024 01:05:53 PM
- Conduent Collaborates with Microsoft on Generative AI to Drive Innovation in Business Process Solutions • Business Wire • 04/29/2024 12:43:00 PM
- U.S. Futures Rise in Pre-Market Trading Amid Key Federal Reserve Meeting and Earnings Week Ahead • IH Market News • 04/29/2024 11:12:54 AM
- Philips Stocks Soar 47% Following US Deal, Tesla Bolsters Presence in China, and More News • IH Market News • 04/29/2024 11:11:24 AM
- U.S. Stocks Rally On Upbeat Tech Earnings • IH Market News • 04/26/2024 08:30:27 PM
- Exxon Mobil Net Profit Drops 28% to $8.22 Billion, Atlassian Surprises with Revenue Boost and Co-CEO Exit, and More in Earnings • IH Market News • 04/26/2024 11:47:51 AM
- U.S. Futures Climb in Pre-Market Trading Amid Tech Gains and Upcoming Inflation Data • IH Market News • 04/26/2024 11:47:25 AM
- The Estée Lauder Companies and Microsoft increase collaboration to power prestige beauty with generative AI • PR Newswire (US) • 04/26/2024 10:00:00 AM
- U.S. Stocks Climb Well Off Worst Levels But Close Mostly Lower • IH Market News • 04/25/2024 08:40:00 PM
- Microsoft earnings press release available on Investor Relations website • PR Newswire (US) • 04/25/2024 08:10:00 PM
- U.S. Futures Drop in Pre-Market Trading as Tech Stocks Plunge After Meta Issues Gloomy Forecast • IH Market News • 04/25/2024 11:53:54 AM
- BHP Bids $38.8 Billion for Anglo American; Biden Unveils Historic Micron Technology Deal, and More News • IH Market News • 04/25/2024 11:48:40 AM
- Coca-Cola and Microsoft Sign Billion-Dollar Agreement, Apple Event Set for May 7, and More News • IH Market News • 04/24/2024 11:28:02 AM
- Stocks Close On Firm Note For 2nd Straight Day On Earnings Hopes • IH Market News • 04/23/2024 09:00:38 PM
- The Coca-Cola Company and Microsoft announce five-year strategic partnership to accelerate cloud and generative AI initiatives • PR Newswire (US) • 04/23/2024 01:30:00 PM
- Futures Pointing To Extended Rebound On Wall Street • IH Market News • 04/23/2024 01:11:27 PM
- Apple Loses Market Share in China, GM Surges in Pre-Market Following Upward Revisions for 2024 Projections, and More News • IH Market News • 04/23/2024 11:25:34 AM
- U.S. Stocks Close On Bright Note Despite Coming Off Day’s Highs • IH Market News • 04/22/2024 08:38:04 PM
- Cognizant and Microsoft Announce Global Partnership to Expand Adoption of Generative AI In the Enterprise, And Drive Industry Transformation • PR Newswire (US) • 04/22/2024 12:30:00 PM
- Nasdaq, S&P 500 Extend Losing Streaks On Tech Weakness But Dow Advances • IH Market News • 04/19/2024 08:32:14 PM
NanoViricides Reports that the Phase I NV-387 Clinical Trial is Completed Successfully and Data Lock is Expected Soon • NNVC • May 2, 2024 10:07 AM
ILUS Files Form 10-K and Provides Shareholder Update • ILUS • May 2, 2024 8:52 AM
Avant Technologies Names New CEO Following Acquisition of Healthcare Technology and Data Integration Firm • AVAI • May 2, 2024 8:00 AM
Bantec Engaged in a Letter of Intent to Acquire a Small New Jersey Based Manufacturing Company • BANT • May 1, 2024 10:00 AM
Cannabix Technologies to Deliver Breath Logix Alcohol Screening Device to Australia • BLO • Apr 30, 2024 8:53 AM
Hydromer, Inc. Reports Preliminary Unaudited Financial Results for First Quarter 2024 • HYDI • Apr 29, 2024 9:10 AM