WannaCry Exploit Could Infect Windows 10 (threatpost.com)

msm1267 writes: EternalBlue, the NSA-developed attack used by criminals to spread WannaCry ransomware last month, has been ported to Windows 10 by security researchers. The publicly available version of EternalBlue leaked by the ShadowBrokers targets only Windows XP and Windows 7 machines. Researchers at RiskSense who created the Windows 10 version of the attack were able to bypass mitigations introduced by Microsoft that thwart memory-based code-execution attacks. These mitigations were introduced prior to a March security update from Microsoft, MS17-010, and any computer running Windows that has yet to install the patch is vulnerable. You can read the researchers' report here (PDF), which explains what was necessary to bring the NSA exploit to Windows 10.

Comments

WAIT, WAIT

[JustAnotherOldGuy]

But Microsoft said that Windows 10 was "the safest Windows ever", EVER!

Re:WAIT, WAIT

[Opportunist]

That's like being the best dressed hobo.

Re:And Monkeys COULD fly outta my butt

[jfdavis668]

You still use Windows ME?

M$'s continual bandaid solutions continue to fail

[Indy1]

Bullshitware like UAC (which stops zero malware in just about every security study I've read), or secure boot, or any other number of "security" theater that M$ comes up with, they all end up failing horribly.

There's no substitute for designing things securely.