Slashdot Mirror
Microsoft Says Previous Windows Patches Fixed Newly Leaked NSA Exploits (pcworld.com)
Microsoft said it has already patched vulnerabilities revealed in last week's high-profile leak of suspected U.S. National Security Agency spying tools, meaning customers should be protected if they've kept their software up-to-date. From a report: Friday's leak caused concern in the security community. The spying tools include about 20 exploits designed to hack into old versions of Windows, such as Windows XP and Windows Server 2008. However, Microsoft said several patches -- one of which was made only last month -- address the vulnerabilities. "Our engineers have investigated the disclosed exploits, and most of the exploits are already patched," the company said in a blog post late on Friday. Three of the exploits found in the leak have not been patched but do not work on platforms that Microsoft currently supports, such as Window 7 or later and Exchange 2010 or later.
you are completely secure citizen. not that you had anything to hide... right?
I'd rather they fix the god damn default apps reseting themselves randomly for no good reason instead. Since the day Windows 10 came out it's been an issue. No I don't want Edge to be my default PDF reader, now stop reseting my shit!
They patched them in the months before they were released, which implies one of two things : Wikileaks contacted them ahead of the release, or the NSA contacted them ahead of the release.
Microsoft has never been known for security prowess, it stands to reason the Wikileaks dump was controlled and Microsoft had foreknowledge of what was being dumped.
ONE of the fixes was fairly recent. Most are old fixes for old exploits.
Our company actually has more recent code than the NSA has in this dump.
From our analysis so far, we're most concerned about Windows 2003.
"We're the only ones allowed to pwn our customers", says Microsoft to the NSA.
'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
...isn't whether they fixed the exploits or not. The real question is how many more exploits were added at the NSA's behest alongside these new patches.
god is a Luddite concept, we worship at the altar of AI which is a large touch screen with Apps that can ape apps with their deep learning neural networks... or something like that
The summary actually contradicts the title.
Three of the exploits found in the leak have not been patched but do not work on platforms that Microsoft currently supports, such as Window 7 or later and Exchange 2010 or later.
Many people still run XP and are at risk because of three unpatched flaws.
Anyone know if there are any available auditing tools for these, specifically? I've got a meeting with my upper managment and cross-country team and would love to show them this specifically as to why they need to drop 2008 ASAP.
You sound like a poorly written chat bot. I still don't know what the hell you are babbling about.
Only the State obtains its revenue by coercion. - Murray Rothbard
I've avoided Windows, but gaming won out.
My Win10 install is very minimal 7 directories, all of my malware sites have been shutdown so I used the EICAR test file.
I was still in the glow of that test it was entertaining tossing that file out and seeing if Defender picked up on it and it was found fairly quickly.
Problem here is all malware programs are written to catch the EICAR test file.
The glow is gone and my Linux Mint not booting after this large Windows update (No boot menu). Things are still the same I've found - let Windows install the file/driver and it's broke being one.