Microsoft Warns Of A Monster Computer Bug, In A Week Of Them

The company has patched the flaw but says it is ‘highly likely’ it will wind up being exploited by malicious software. Microsoft Warns Of A Monster Computer Bug, In A Week Of Them

The Microsoft flaw is one of several high-profile computer-security issues to crop up recently.Microsoft Corp. took the unusual step of warning that a computer bug it has now patched could be used by a cyber weapon similar to the WannaCry worm, which spread across the globe two years ago.

The bug is one of several high-profile computer-security issues to emerge this week, though the impact isn’t yet clear.

Microsoft said that it hasn’t seen anyone take advantage of the flaw, which affects older versions of its Windows operating system, but that it believes it is “highly likely” the flaw will wind up being exploited by malicious software, now that it has been publicly disclosed.

Any “future malware that exploits this vulnerability could propagate from vulnerable computer to vulnerable computer in a similar way as the WannaCry malware spread across the globe,” Microsoft said Tuesday in a blog post.

The flaw affects Windows 7 and Windows Server 2008. It also affects Windows 2003 and Windows XP—older versions of Windows that Microsoft doesn’t typically patch. But, in a sign of the severity of the bug, Microsoft released XP and Windows 2003 patches as well.

“This is certainly one to take seriously,” said Chris Coulter, vice president of technology with BlackBerry Ltd.’s Cylance security group.

Users of Windows 10 and Windows 8 aren’t affected by the flaw, Microsoft said.

Microsoft said the best way for companies to protect themselves against the vulnerability is to upgrade to newer versions of its software, which are harder to hack and include better tools for automatic updating of patches.

In the case of the WannaCry attack, Microsoft had issued a patch months before the ransomware began spreading globally. But some companies hadn’t installed the fix, either out of lax security practices or concerns about disrupting their day-to-day operations.

Any time a company deploys new code like a patch, the installation could fail or run into other glitches, or the software could end up incompatible with a company’s existing programs—potentially costly hiccups. All those issues leave companies vulnerable despite an available fix.

Plenty of companies can install software updates with little disruption. But large institutions can take months to test and deploy patches to avoid business disruptions. That patching process can be drawn out at hospitals, power plants and other critical institutions that can’t afford to go offline for hours at a time, cybersecurity specialists say.

WannaCry spread quickly, and infected more than 200,000 systems world-wide with ransomware—software that rendered computer systems unusable and demanded a digital ransom. It affected systems at England’s National Health Service, FedEx Corp. and Nissan Motor Co.

The 2017 worm could have been more devastating, but it was stopped when a security researcher activated a “kill switch” feature that prevented the worm from spreading.

Cybersecurity For You & Your Business

Microsoft’s bug came a day after Facebook Inc. patched its WhatsApp encrypted-messaging application following the company’s disclosure it had been used in a novel form of attack: Hackers had found a way to install spyware on mobile phones by using a bug in the voice-calling feature of WhatsApp.

The attack was used in hacking tools created by an Israeli cybersecurity firm called NSO Group Technologies Ltd, according to people familiar with the WhatsApp bug investigation.

NSO Group sells its hacking and spyware tools to law enforcement and government agencies. A spokeswoman for the company declined to say whether NSO Group had created attack code leveraging the bug, but said the company doesn’t identify targets or operate its technology against them.

Microsoft Warns Of A Monster Computer Bug, In A Week Of Them (#GotBitcoin?)

CyberSecurity Newsflash!: (Youtube)

Three years ago, NSO Group’s software was linked to an attack against Apple’s iPhone.

That flaw was particularly interesting because WhatsApp is often used by security-conscious people looking to take advantage of its end-to-end encryption capability, which prevents others from snooping on messages as they are sent, Mr. Coulter said. “Myself and millions of others inadvertently put all that at risk by blindly trusting the app,” he said.

On Tuesday, Intel disclosed issues in its microprocessors that could allow hackers to gain unauthorized access to data stored in a computer’s memory. The new bugs are similar to last year’s Spectre and Meltdown flaws, but are hard to exploit and unlikely to cause the kind of widespread havoc of a computer worm, security researchers said.

Updated: 9-25-2019

Cybersecurity Firm Releases WannaCryFake Bitcoin Ransomware Fix

Cybersecurity firm Emsisoft has released a solution for Bitcoin (BTC)-demanding ransomware WannaCryFake.

Pay Bitcoin In Return For Your Data

In a Sept. 25 blog post, Emsisoft announced that they are releasing a new free fix for the WannaCryFake ransomware bug. The WannaCryFake is the next version of the WannaCry worm, a type of malicious software program that first began spreading across computer networks in May 2017.

When a computer system is infected with the WannaCryFake worm, data is held hostage and a payment in Bitcoin will be requested to decrypt the files and release access to data. Emsisoft explains:

“WannaCryFake is a strain of ransomware that uses AES-256 to encrypt a victim’s files. Files that have been encrypted by WannaCryFake are appended with the file extension: ‘.[][recoverydata54@protonmail.com].WannaCry’ According to the ransomware distributors, the price of decryption depends on how quickly you email them.”

The software company adamantly states that “under no circumstances should you attempt to make contact,” and to not ever pay the ransom. The free decryption tool will puportedly help ransomware victims recover their files without causing permanent data loss.

Ransomware Attacks Up By 118%

Cointelegraph previously reported that, according to cybersecurity company McAfee Labs, ransomware attacks increased by 118% in the first three months of 2019. The cybersecurity company added that one of these ransomware campaigns used the Ryuk ransomware strain, which even managed to temporarily halt newspaper printing in the United States.

Microsoft Warns Of A, Microsoft Warns Of A, Microsoft Warns Of A,Microsoft Warns Of A,Microsoft Warns Of A,

Online Privacy Tools and Tips

Ex-Intelligence Analyst Charged With Leaking Classified Information

Google To Launch New Privacy Tools To Limit Cookies

Google Vs Duckduckgo | Search Engine Manipulation, Censorship And Why You Should Switch (#GotBitcoin?)

Alert! 540 Million Facebook Users’ Data Exposed On Amazon Servers (#GotBitcoin?)

Facebook Bug Potentially Exposed Unshared Photos of Up 6.8 Million Users (#GotBitcoin?)

Facebook Says Millions of Users’ Passwords Were Improperly Stored in Internal Systems (#GotBitcoin?)

Advertisers Allege Facebook Failed to Disclose Key Metric Error For More Than A Year (#GotBitcoin?)

Ad Agency CEO Calls On Marketers To Take Collective Stand Against Facebook (#GotBitcoin?)

Thieves Can Now Nab Your Data In A Few Minutes For A Few Bucks (#GotBitcoin?)

New Crypto Mining Malware Beapy Uses Leaked NSA Hacking Tools: Symantec Research (#GotBitcoin?)