Slashdot Mirror
Microsoft Says Russia-Linked Hackers Are Exploiting Newly Discovered Flaw In Windows OS (reuters.com)
An anonymous reader quotes a report from Reuters: Microsoft Corp said on Tuesday that a hacking group previously linked to the Russian government and U.S. political hacks is behind recent cyber attacks that exploit a newly discovered flaw in its Windows operating system. Microsoft said that a patch to defend Windows users against this sort of attack will be released on Nov. 8. The software maker said in an advisory on its website there had been a small number of attacks using "spear phishing" emails from a hacking group known Strontium, which is more widely known as "Fancy Bear" or APT 28. A U.S. intelligence expert on Russian cyber activity said that Fancy Bear primarily works for or on behalf of the GRU, Russia's military intelligence agency, which U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails. Microsoft said the attacks exploited a vulnerability in Adobe Systems Inc's Flash software and one in the Windows operating system. Adobe released a patch for that vulnerability on Monday as security researchers with Google went public with details on the attack.
I know that's a crazy idea, but why wait? Get that shit fixed!
I made this: http://www.bpftpserver.com
Is it just me or is everything linked to fucking Russians these days? Reminds of of the old chant "Zee Germans are coming!"
Should I be angry at Adobe for having a crappy flash API, or should I be angry at Microsoft for providing Adobe Flash BY DEFAULT in Windows 10?
...how 'bout "FIX YOUR SHIT" instead doing press and/or blaming the russians for everything from hairloss to sunspots?!
No waiting for a security (or any other) patch. Updates are right away.
Like librussia.so?
"It's such a fine line between stupid and clever" -- David St. Hubbins, Spinal Tap
Nobody with the potential skillset in the US or Western Europe has the patience to study Windows in sufficient detail to develop an exploit.
The two biggest security holes ever created working together to tear apart the fabric of the U.S..
Russia's military intelligence agency, which U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails.
Which intelligence agencies would those be? Because the FBI has specifically denied this. Of course you could just be shilling for Hillary the liar.
Seven puppies were harmed during the making of this post.
Blame every intrusion into your network on Russia, is that the flavor of the month/season?
This Russia as the bogeyman is starting to get really boring to see.
2016 cant be over if russians arent also blamed for global warming and erectile disfunction
Microsoft makes more money if defects are found in Windows. The defects make people and organizations feel it is necessary to buy a newer version.
Microsoft management apparently thinks, "Why release good software when defects make money?"
There should be government regulations preventing abuse of computer software customers. We shouldn't be forced to install all fixes offered, for example.
We need an open-source operating system that can run all Windows software. (Using Linux requires re-training every user.)
"Never let a crisis go to waste"
Patch Tuesday. In more ways that one.
Have gnu, will travel.
Get a mac, android tablet or Linux if you're not a fan of security breeches. I feel bad for the technically illiterate who don't know how to reinstall windows and drivers when a virus does happen.
https://blogs.technet.microsof...
NOV 8 to late for the windows based voteing systems.
Poor Hillary... everybody's out to get her.
I'm not repeating myself
I'm an X window user; I'm an ex-Windows user
Hire some really great staff again and fix your OS.
Its not that hard, a few US universities still turn out the best graduates every year. The very best in the world.
They have the skills to make Microsoft products secure again.
What are we seeing in this report?
"A U.S. intelligence expert on Russian cyber activity " seems to have easy and constant press access.
The "tell' is the lack of internal security on the part of the "U.S. intelligence expert" and been allowed to rush to tell the media.
If this was real code, nobody would know and it would all be a secret and under a real investigation and mitigation.
The US is using the media to link very old "Bear" code that has been talked about for a while and is well understood by contractors globally for years to sell other stories to the waiting media.
The link back to "U.S. intelligence officials have concluded were responsible for hacks of Democratic Party databases and emails." should be understood in the context of what was said.
"Julian Assange: 'A lot more material' coming on US elections"
http://edition.cnn.com/2016/07...
""Perhaps one day the source or sources will step forward and that might be an interesting moment some people may have egg on their faces. But to exclude certain actors is to make it easier to find out who our sources are," Assange told CNN."
The leak was a walk out like the Pentagon papers or US gov insider help given to the Watergate reporters.
Domestic spying is now "Benign Information Gathering"
Simple statement to recognize a troll: "Remember, unfettered Capitalism is Fascism." which simply means you do not know what Capitalism is. No point reading after that piece of ignorance.
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
Actually before the recent resurgence of "political Islam", before Arab states opposed Israel (which defacto allied Arab Muslims and Christians, unlike what is happening now), well before the madness of WW-II, Jews experienced persecution at the hands of Orthodox Christians in Russia. It's the Fiddler-on-the-Roof thing; the Russian-refugee experience is the family history of many persons of Jewish heritage here in America.
It is a point of divergence between Israel, which if not having friendlier relations with Russia, quickly sought and obtained accommodation of its security interests without interfering with what Russia is doing in Syria, and with the United States, where Russia is once again being demonized.
To the extent that Jewish persons seek to influence policy in a way informed by life experience and family history, along with everyone else, Jews in America may have a somewhat different perspective on Russia and other Orthodox Christian countries than Israelis.
There are also two sides to many ancient enmities. To the extent that Jews in America with "neo-Conservative" political label appear to be unreasonable in distrusting Russia and other Slavic countries with Orthodox Christians, there as that conclave of American Middle Eastern Christians and recent descendants, many of them Orthodox Christians, that Candidate Ted Cruz famously attended. Middle East Christians have fared poorly under Muslim Brotherhood, Al Qaeda, ISIS, and so on, and whereas Israel is certainly no friend of those groups, there is this tendency to lump all Arabs, Christian or Muslim, moderate or extremist, religious or secularist, into the same category as not being friends of Israel.
Some shade was thrown on Israel at that meeting that caught the Senator by surprise, and he did an about face and started speaking in a way that was perceived as insulting to his hosts and signaling to other constituent groups of his "courage in standing up to anti-Semitism." That may have been aimed more at pro-Israel Evangelical Christians in the US than at pro-Israel Jews, it may say a lot more about the Senator than it does about Christians of whatever geographic origin or Jews, but it may offer some insight into the dynamic than to simplistically assert "it's okay to dump on the Russians."
Reading the story it does sound like M$ are blaming Russia for their shitty work. M$ did not do a good job and as a result the product is bad. Nothing new there. A hacking group exploited the bad code. Nothing new there. For no valid reason they are linked to Russia. This is just propaganda. Of course Russia uses hackers whereas the US has whole divisions of in house hackers. The US is still the number one cyber terrorist and Russia has much less interest in the US than the US imagines. The US wants to go out and hurt everyone but the rest of the world is far more interested in enjoying their own lives. Russia is far more interested in Russia and has very little interest in the scary clown or the witch.
I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
Buddies.
Do you have to repeat this cyber BS on slashdot, the technology site?
Same shit different day.
Chinese hackers got lazy and now Russian hackers own their game.
Lazy chinks, or lazy security "experts"?
Your Hillary is better for your $$$.
Is this why Microsoft and Hillary are so flawed ?
I always knew Donald Trump approved of making Windows worse, and now he is using Putin to do it !!
It was a friend, an intellectual with knowledge of my heritage, whose own family heritage is that of the Jewish experience in Ukraine from Tsarist times, who made me aware of the situation with Israel, Serbia, and the Kosovo War.
There are so few "Great Russians" in the US, or at least until very recently, that the only connection Americans have had with Russia is through families whose ancestors were refugees from the persecutions of Jews in pre-Revolutionary Russia.
What you say about Israel and Russia corroborates what my friend told me. But to many Americans, Jews and non-Jews alike, "Russians" are those bad people who chased Tevya from "Fiddler on the Roof" out of his home. I offered such as explanation why many in the U.S. view Russia aiding Syria's Assad very differently from Israel. I am not saying it is right or wrong, I am just trying to "wrap my head around" why there is a brewing confrontation between the U.S. and Russia over Syria whereas the Israelis appear to have made accommodation with Russia over Syria.
The last dump from the shadow brokers contained the servers the NSA uses to hack others, it included compromised Russian servers (Mustafa Al-Bassam tweet).
Google: Microsoft MOONLIGHT plugin
HA, HA!
If a major world power were to go to war with another, what is a multinationals responsibility? Especially if one of those nations demand access to their resources. In this instance, Microsoft was initially a American company. And they have been known to work with American agencies in the past. But they also market to Russia. Really, the question would apply to Wal-mart or any other company that has large databases.
Restore the madness of youth's lechery