Slashdot Mirror


Microsoft Warns of 'Destructive Cyberattacks', Issues New Windows XP Patches (zdnet.com)

Ed Bott, reporting for ZDNet: Citing an "elevated risk for destructive cyberattacks," Microsoft today released an assortment of security updates designed to block attacks similar to those responsible for the devastating WannaCry/WannaCrypt ransomware outbreak last month. Today's critical security updates are in addition to the normal Patch Tuesday releases, Microsoft said. They'll be delivered automatically through Windows Update to devices running supported versions, including Windows 10, Windows 8.1, Windows 7, and post-2008 Windows Server releases. But in an unprecedented move, Microsoft announced that it was also making the patches available simultaneously for manual download and installation on unsupported versions, including Windows XP and Windows Server 2003. The new updates can be found in the Microsoft Download Center or, alternatively, in the Update Catalog.

76 comments

  1. C'mon, editors! by __aaclcg7560 · · Score: 1

    [...] from the job-security-for-non-microsoft-it-workers dept

    FTFY

    1. Re:C'mon, editors! by chispito · · Score: 5, Funny

      [...] from the job-security-for-non-microsoft-it-workers dept

      FTFY

      You have it backwards. Who is going to apply these patches? Who is going to help businesses migrate off of old, unsupported versions of Windows (onto newer versions of Windows--let's be real here)?

      Answer: Not non-Microsoft-IT-workers.

      But don't worry, there is plenty of work for all, when you consider all of the upatched OpenSSL, ImageMagick and SAMBA out there. Or, you know, WordPress.

      --
      The Daddy casts sleep on the Baby. The Baby resists!
    2. Re:C'mon, editors! by Anonymous Coward · · Score: 0

      [...] from the job-security-for-non-microsoft-it-workers dept

      FTFY

      You have it backwards. Who is going to apply these patches? Who is going to help businesses migrate off of old, unsupported versions of Windows (onto newer versions of Windows--let's be real here)? Answer: Not non-Microsoft-IT-workers. But don't worry, there is plenty of work for all, when you consider all of the upatched OpenSSL, ImageMagick and SAMBA out there. Or, you know, WordPress.

      None of my networks. But that's because patching 1,000 systems at a time is pretty easy when you have puppet, salt, or clusterssh. Unfortunately Windows doesn't support that crap. Just 'approve' an update in WSUS and hope the system installs it at some point. Maybe you'll get a generic and unintuitive 'failed' message back.

    3. Re:C'mon, editors! by Anonymous Coward · · Score: 0

      I run Wordpress and I've never been Ha-fuuuuuuuuck

    4. Re:C'mon, editors! by Anonymous Coward · · Score: 0

      Does WSUS even support Windows 2003 and XP any more? I thought that got dropped in the upgrade from WSUS 3.x to 4 .x (which was required to support Windows 10 and later).

    5. Re:C'mon, editors! by chispito · · Score: 1

      SCCM is the MS equivalent of what you are describing. It does a lot more, but it is commonly used for patching.

      --
      The Daddy casts sleep on the Baby. The Baby resists!
    6. Re: C'mon, editors! by Anonymous Coward · · Score: 0

      Generally I don't like you. But you're right on that one.

    7. Re: C'mon, editors! by Anonymous Coward · · Score: 0

      And yet I still manage to point out to our sccm admin machines that are missing key patches (as discovered by a nessus scan)

      External experts seem to think we do stuff right (in sccm) so i guess its just a bit flakey or somethin.

  2. WHAT XP UPDATES??? by Anonymous Coward · · Score: 0

    There are no XP updates this month. What the hell is this guy talking about?

    1. Re:WHAT XP UPDATES??? by WillAffleckUW · · Score: 1

      There are no XP updates this month. What the hell is this guy talking about?

      None for Win 7 either. Somebody messed up bad.

      --
      -- Tigger warning: This post may contain tiggers! --
    2. Re:WHAT XP UPDATES??? by campuscodi · · Score: 2
    3. Re:WHAT XP UPDATES??? by redmid17 · · Score: 3, Informative
    4. Re:WHAT XP UPDATES??? by Anonymous Coward · · Score: 1

      it's a trap. They're gonna implant telemetry on devices that didn't support it. They wanna reach the last pitiful win user.

  3. Link to XP patches? by Anonymous Coward · · Score: 1

    It would be nice if either TFA actually linked to the patches.

    1. Re:Link to XP patches? by b0bby · · Score: 1

      ZDnet links here:

      https://portal.msrc.microsoft....

      There are 4 pages of patches so I assume XP is on one of them.

    2. Re:Link to XP patches? by Anonymous Coward · · Score: 4, Informative

      https://www.catalog.update.microsoft.com/Search.aspx?q=KB4024323

      It would be nice if there was a link to the "supported" patches too, or they used the same damn KB number ...

    3. Re:Link to XP patches? by b0bby · · Score: 2

      My assumption appears to be wrong, I can't find any XP patches on that page.

    4. Re:Link to XP patches? by Spy+Handler · · Score: 1

      You assume wrong. Nothing for XP in any of the 4 pages.

    5. Re:Link to XP patches? by perpenso · · Score: 1

      It would be nice if either TFA actually linked to the patches.

      It would also be nice if MS would make available for download that final Win XP service pack.

      Seriously, final service packs for obsolete/unsupported versions of Windows have to be removed from the download site?

    6. Re:Link to XP patches? by thomst · · Score: 1

      I've NEVER said this about an AC post before, but MOD PARENT +1 INFORMATIVE!

      --
      Check out my novel.
    7. Re:Link to XP patches? by Anonymous Coward · · Score: 0

      Was there another SP after SP3?

      Right now, I have SP3 and a folder with something like 80+ extra patches.that came after.

    8. Re:Link to XP patches? by Anonymous Coward · · Score: 2, Informative

      This full list of patches from this month that have something for XP appears to be:
      This KB3197835
      and this KB4012583
      and this KB4018271
      and this KB4018466
      and this KB4019204
      and this KB4022747
      and this KB4024323
      and this KB4024402
      and this KB4025218

    9. Re:Link to XP patches? by Darinbob · · Score: 1

      This comes from quoting a zdnet article rather than going to the source. Slashdot is all about making sure the reader has to do lots of research until the real story is discovered. But if you go to the microsoft pages the information can be uncovered.

    10. Re:Link to XP patches? by Anonymous Coward · · Score: 2, Informative

      That is just one of the XP patches. They are all here, along with Win 8 and S2003

      https://support.microsoft.com/en-us/help/4025687/microsoft-security-advisory-4025685-guidance-for-older-platforms

    11. Re:Link to XP patches? by stooo · · Score: 1

      Here's a link to a better patch:
      https://linuxmint.com/

      --
      aaaaaaa
    12. Re:Link to XP patches? by Opportunist · · Score: 1

      The question that is required here is why you still run XP.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    13. Re:Link to XP patches? by perpenso · · Score: 1

      The question that is required here is why you still run XP.

      I have a virtual machine for testing purposes in case someone paying the bills say they want the software I'm writing to work on XP. The virtual machine needs the final service pack to install its tools (drivers, management).

  4. If by unprecedented you mean last month, then no. by Anonymous Coward · · Score: 1

    Seriously ... they literally set the precedent exactly a month ago.

  5. Great news! by Anonymous Coward · · Score: 0

    This is great news for the people. Companies of all stripes are going to see that you can't walk away from your products and expect your brand to survive.

    Microsoft knows they will suffer the brand damage if they don't release patches they never stopped producing. Now, they can shift the blame to people who don't patch.

    1. Re:Great news! by mfh · · Score: 1

      Now, they can shift the blame to people who don't patch.

      Depends on why someone is running XP. If it's for business and software relies on that os for some reason, that's one major case. Another is the case of older folks who don't know much about computers so they are running the same thing they have ran since they bought the machine. Maybe they never ran an update?

      True story. I got a call from my ex about her father's computer and I'm a nice person so I head over to his place because he "can't get the interenet". Show up and he has 1200+ unknown processes running and the mouse is lagging horribly due to the lack of RAM available.

      I tried not to laugh but he had some malware and this malware was in a battle against some other malware. A malware battle royal was taking place on his system. Worms were strangling one another.

      He was running Vista. I said plainly that the computer was salvageable but unless he had the original disks it would probably be more expensive to get a new OS installed than to buy a new computer at that point.

      So I told him I had a couple hours to burn and would gladly help him buy a new one.

      By the time I was done he was on a rocketship compared to that boat-anchor system. I patched his system, got him all the software and ran ccleaner for him plus installed malwarebytes. He was overjoyed.

      A WEEK LATER, I get a call that he can't get on the internet. I show up and he had his old system connected to the router. I guess he thought it was needed to go in THAT port and not his new computer??? IDK but these older users always give me a good chuckle but I def try to help whenever possible. :)

      --
      The dangers of knowledge trigger emotional distress in human beings.
  6. Re:If by unprecedented you mean last month, then n by Spy+Handler · · Score: 1

    and before that, the conficker manual patch for XP.

    But I guess you could say it's "unprecedented" since the beginning of this month...

  7. Re:If by unprecedented you mean last month, then n by sinij · · Score: 0

    I read 'unprecedented' as 'unusual, since releasing security patches for a product that was long past EOL is unusual. Not many organizations willing to do that and MS should be commended.

  8. ... but what other "features"? by Lead+Butthead · · Score: 2

    Does it add any new telemetry tracking... ahm, "features" to those "obsolete" products?

    --
    ELOI, ELOI, LAMA SABACHTHANI!?
    1. Re:... but what other "features"? by Anonymous Coward · · Score: 0

      Like the NSA code added to android for 'security'.. Dynamic loading of remote content to check for 'unknown/new security threats'.. IE: backdoor, in their case that is..

    2. Re:... but what other "features"? by Anonymous Coward · · Score: 0

      Does it add any new telemetry tracking... ahm, "features" to those "obsolete" products?

      Of course! This is the very reason for the patch.

  9. Re:If by unprecedented you mean last month, then n by Anonymous Coward · · Score: 0

    XP, the zombie OS that just keeps on going. It is well into its after life now, which according to most religious scriptures lasts forever.

  10. Get the Patches by ntsucks · · Score: 1
    --
    Those who can do. Those who can't sue.
    1. Re:Get the Patches by Thelasko · · Score: 1

      TL;DR

      http://www.catalog.update.micr...

      Someone finally found it!

      --
      One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
    2. Re:Get the Patches by Anonymous Coward · · Score: 0

      That's last month's upgrade

    3. Re:Get the Patches by Anonymous Coward · · Score: 0

      Nope, that's last month's update.

    4. Re:Get the Patches by gustygolf · · Score: 1

      Correct URL: https://support.microsoft.com/...

      A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could execute code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

      To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable.

      The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests.

      Emphasis mine. Frankly, it doesn't seem very critical for us desktop users.

      According to this page, only XP and 2003 Server are affected. Vista and newer aren't.

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
  11. Doesn't help me by Anonymous Coward · · Score: 0

    All Windows 7 updates have failed on my machine since August last year, and I've tried everything possible to fix the problem, including all Microsoft troubleshooting tools. Every update gets rolled back. It's ridiculous.

    1. Re: Doesn't help me by Anonymous Coward · · Score: 0

      Same here. Getting Windows updates on 7 requires you to surf the MS KB and manually download and run the patches.

  12. Re:If by unprecedented you mean last month, then n by Kjella · · Score: 4, Informative

    I read 'unprecedented' as 'unusual

    Except unprecedented is much stronger, it very explicitly means that it's never, ever happened before. If you can point to even a single previous instance, then it's by definition wrong to use it. And since Microsoft recently did release a patch for an EOL product, using it now is plain wrong. Nice by Microsoft, but still wrong. It also makes me wonder how well a "ten more years of security patches" upgrade for Win7 would sell...

    adjective
    1. without previous instance; never before known or experienced; unexampled or unparalleled:

    --
    Live today, because you never know what tomorrow brings
  13. Re:If by unprecedented you mean last month, then n by WheezyJoe · · Score: 4, Interesting

    Yep. Reported right here, one month ago.

    and it's not the desktops you should be worried about. It's the ATM's, cash registers, medical/hospital machines, metro/subway kiosks, traffic-light controllers, maybe even devices used by Army field personnel or on Navy ships and submarines (horrors...), uncounted masses of machines in use every day that you'd never guess are running Windows XP with no viable means of upgrading short of scrapping them entirely. XP lived long enough to become the go-to OS for way too much stuff.

    --
    Take it easy, Charlie, I've got an Angle...
  14. Re:If by unprecedented you mean last month, then n by sinij · · Score: 0

    I read 'unprecedented' as 'unusual

    Except unprecedented is much stronger, it very explicitly means that it's never, ever happened before. If you can point to even a single previous instance, then it's by definition wrong to use it. And since Microsoft recently did release a patch for an EOL product, using it now is plain wrong. Nice by Microsoft, but still wrong. It also makes me wonder how well a "ten more years of security patches" upgrade for Win7 would sell...

    adjective 1. without previous instance; never before known or experienced; unexampled or unparalleled:

    Your point is both correct and pedantic.

  15. You Had One Job - Links Please by Anonymous Coward · · Score: 0

    How about some god damn links with specific KB numbers?
    And not links posted a month ago.

    1. Re:You Had One Job - Links Please by stooo · · Score: 1

      There's a better patch for that :
      https://linuxmint.com/
      BTW, You don't need a KB number.

      --
      aaaaaaa
  16. Liability by Kergan · · Score: 1

    What might be MS's liability if old time XP users sue owing to security issues that don't get patched?

    1. Re:Liability by James+Carnley · · Score: 5, Insightful

      Zero. XP is unsupported and there is no reasonable assumption that it is secure.

    2. Re:Liability by Anonymous Coward · · Score: 0

      If XP is unsupported then the copyright on it should vaporise? Are they still making money from XP in some way as to not be held accountable?

    3. Re:Liability by Anonymous Coward · · Score: 0

      Read the disclaimer on EULA: they are not to be held accountable, regardless of copyright.

      Copyright for a work made for hire (and all commercial software belongs there) expires 120 years after the work was created, or 95 years after it was first published, whichever comes first. Essentially, first software for first electronic computers might legally enter public domain somewhere in 2030's and 2040's. 8-bit computer games and applications made by companies? Not until into 2070's. For all practical purposes, except history, copyright is forever.

    4. Re:Liability by Anonymous Coward · · Score: 0

      XP embedded (POS, WES9, etc...) are still supported and used. Some versions until 2019.

    5. Re:Liability by Opportunist · · Score: 1

      I'm still surprised this holds any water in court. Imagine car manufacturers trying to get away with bullshit like that.

      "You get this car as-is. If you lose a wheel and kill yourself or a few dozen bystanders, it ain't our fault, no matter whether it actually is due to shoddy manufacturing or poor engineering. We'll fix your car (provided that it first fell apart due to our gross negligence and not your fault), but only for the next 5 years. Any fault you find after that you have to live with, because we won't fix it and you ain't allowed to!"

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    6. Re:Liability by Opportunist · · Score: 1

      POS is a very apt description of those boxes...

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    7. Re:Liability by Anonymous Coward · · Score: 0

      Why should the copyright expire? Do movies or books get updated after they are released?

      I don't think the current copyright terms are reasonable, but I also hate bad arguments.

    8. Re:Liability by Anonymous Coward · · Score: 0

      Probably about the same as they would be with Windows 10.

      There are specific clauses in the EULA that say they can't be held responsible for both.

  17. don't trust them by Anonymous Coward · · Score: 0

    these patches likely are backdoors.
    use these to not get pwned they say, use these and defintiely get pwned, as these are from microNSAoft

  18. Microsoft's search sucks by Anonymous Coward · · Score: 1

    If you search for "windows XP", the last patch was released in 2014:

    https://www.catalog.update.mic...

    If you search for "windows XP sp3", then you can find the last patches that were just released:

    https://www.catalog.update.mic...

  19. Re:If by unprecedented you mean last month, then n by Anonymous Coward · · Score: 0

    Pedantic, the best kind of correct?

  20. Re:If by unprecedented you mean last month, then n by Anonymous Coward · · Score: 0

    Neutral European here, not a fan of either side.

    Good, then either side can kill you with a clear conscience.

    Protip: There's no such thing as "neutral" in the real world. Other people's actions will force you to make a choice. Best to make it now when you have options besides death or a concentration camp.

    I don't care. I only have a couple of windows machines left and will be changing OS going forward. I won't install anything from MS. They have totally lost any small amount of trust they may have ever had. I've gone as far as removing the update executables so patches can't even be downloaded and installed manually. I don't have anything worth anything on them anyway. No banking/financial or anything else except some old, obsolete games. I'll leave them directly connected to the 'net by high-speed fiber. Let the DDoSing, phishing, and cyberattacks roll!

  21. Re:If by unprecedented you mean last month, then n by thegreatbob · · Score: 1

    Pedantic, the best kind of correct?

    Technically, yes.

    --
    There is no XUL, only WebExtensions...
  22. What about an update-roll up for vista xp 7 08r2? by Joe_Dragon · · Score: 1

    What about an update-roll up for vista / xp / 7 / 08r2?

    It does not need to be an full on SP but just something that is one exe. Vista is very painful to get on the update train after an clean install. 7 is better but an sp3 that is just an update roll up of sp2 is nice to have.

    XP for the most part works with the 3rd party sp4 but that will needed a bit of windows update after installing.

  23. But but but... by Anonymous Coward · · Score: 0

    Won't that undercut sales on Windows 10? If they don't punish people for the temerity of trying to use what they've already paid for, how will they ever get all the people who refused to "upgrade" to their latest re-release of the same warmed-over shit, over and over again?

  24. Not for Windows 7 by Anonymous Coward · · Score: 0

    Here's the MS article...
    https://support.microsoft.com/en-us/help/4025687/microsoft-security-advisory-4025685-guidance-for-older-platforms

    Article ID: 4025687 - Last Review: Jun 13, 2017 - Revision: 13
    Applies to:
    Windows Vista Service Pack 2, Windows Vista Home Basic, Windows Vista Home Premium, Windows Vista Business, Windows Vista Ultimate, Windows Vista Enterprise, Windows Vista Starter, Microsoft Windows XP, Microsoft Windows XP Professional, Microsoft Windows XP Home Edition, Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Web Edition, Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86), Microsoft Windows Server 2003 R2 Enterprise x64 Edition, Microsoft Windows Server 2003 R2 Standard x64 Edition

    Does NOT apply to:
    Windows 7

    Does that seem kind of weird to anyone?

  25. Windows XP POSReady version is still supported by Anonymous Coward · · Score: 0

    POSReady version of Windows XP is still supported by Microsoft. Of course they have patches. POSReady is no different from XP Professional internally. You can enable POSReady updates on your regular XP via a simple registry change.

    [HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]

    "Installed"=dword:00000001

    Just booted my XP VM with this hack and sure enough it had the KB4024323 update.

    Running XP (or any Windows) with SMB/NetBT/random-shit-microsoft-protocol listeners enabled is just dumb. All this can be disabled with simple registry hacks.

  26. If only there was a patch for IT Dept mentality by LANjackal · · Score: 1

    Can't wait for IT departments to not install these patches and then 1) Blame MS when they're hacked 2) Scream bloody murder at Microsoft's attempt to enable automatic updates.

  27. Re:If by unprecedented you mean last month, then n by arglebargle_xiv · · Score: 1

    They'll be delivered automatically through Windows Update to devices running supported versions.

    And if you're in the select few, you'll end up in a bluescreen-reboot loop after the updates. So you'll get your "Destructive Cyberattack" courtesy of Microsoft rather than the malware authors. And if you're unlucky enough to be on Win10, there's almost no way to block it.

  28. How does MS know attacks are coming? by Anonymous Coward · · Score: 0

    ...unless they are the attackers?

  29. Re:What about an update-roll up for vista xp 7 08r by Neo-Rio-101 · · Score: 1

    Or, you know, the black edition Windows XP off Pirate Bay that's been modified with all the patches up to 2015 and access to the POS patches as well.

    --
    READY.
    PRINT ""+-0
  30. Microsoft knew about WannaCry 6 months ago by Anonymous Coward · · Score: 0

    Did you know that the patches recently issued to fix WannaCry were finalized and digitally signed 6 months ago?

    Everything suggests NSA/CIA were behind WannaCry, to sample and investigate what kind of damage could be achieved and how they could use attacks like these against all other countries in the world. When they had the information they needed, they allowed Microsoft to send out the ready-made patches ASAP to minimize the damage.

    Of course there was no company-wide memo sent down to everyone including the janitor and the ladies in the cafeteria. With these things, a combined comply-and-gag court order from the NSA was given to just a handful of people required to get the work done.

    Makes you wonder exactly what the U.S. is up to.

  31. XP patches unreachable on XP IE by Anonymous Coward · · Score: 0

    In a case of footgun, Microsoft failed to provide reasonable access to the patches directly from XP/2003 because the damn page for the unsupported OS patches won't load in the IE version they have (even with the TLS crypto upgrade hotfix installed).

    Which means you have to know the individual KB numbers and search/download from the update catalog site. Manually, for each damn KB. Of all the SSL exceptions approved by the CA/B Forum, a specific download site for old stuff from Microsoft for old browsers should have been obvious...

  32. Will Microsoft f**k all of us again? by Anonymous Coward · · Score: 0

    Have a new processor running windows 7? Need a security update? Microsoft says: "We hate our customers!" by adding a nice popup saying you have "Unsupported Hardware" every 3 minutes and no more updates!

    Because we're Microsoft, we'll spy on you and screw you however we can.

    Would love to trust this update, but Microsoft has become untrustworthy.