Technology content trusted by users in North America and around the world.
4,948 Articles | 29,843 Posts
Select Your Edition:  
Tweakipedia
A wealth of
tech information!

TRENDING NOW: SlimPort Summit 2013 Coverage - What is SlimPort?
USA EditionYou are located: Home > All News > Hacking & Security News > Microsoft may have leaked code capable of attacking critical Windows bug

Microsoft may have leaked code capable of attacking critical Windows bug

By: (more) | Hacking & Security News | Posted: Mar 16, 2012 11:29 pm

No, I'm not trying to use scare tactics. No, I don't want you to rip out your link to the internet. I just want you to beware: Microsoft may have had a hand in leaking executable code that was used in a proof-of-concept (PoC). The data packet that was used was the same that Luigi Auriemma, an Italian security researcher, discovered and reported way back in May of 2011. Last Tuesday, Microsoft updated all flavors of Windows to patch the critical RDP vulnerability. Both Microsoft, and I, strongly recommend that you update and patch all of your machines running Windows.

 

microsoft_may_have_leaked_code_capable_of_attacking_critical_windows_bug

 

Auriemma has stated:

 

In short it seems written by Microsoft for [its] internal tests and was leaked probably during its distribution to their 'partners' for the creation of antivirus signatures and so on. The other possible scenario is [that] a Microsoft employee was [the] direct or indirect source of the leak. [A] hacker intrusion looks the less probable scenario at the moment.

 

Other researchers have said that the RDP proof-of-concept was unreliable, and only crashed Windows. The existing code, however, would be a good starting point for a successful exploit, they noted. "Microsoft has spread the potential starting point for an unauthenticated kernel-level worm,"Auriemma charged. "Weren't they here to protect the users?" The Microsoft patch MS12-020 is available via Windows Update and Windows Server Update. It is highly recommended to install the patch as soon as possible, because Gun.io, which bills itself as a place to "Hire the best hackers," is offering a reward to the first working exploit of the bug.


SOURCE #1

Related Tags



Further Reading: Read and find more Hacking & Security news at our Hacking & Security news index page.

TweakTown News RSS FeedDo you get our news RSS feed? Get It! Got a news tip? Tell Us!

Post a Comment about this news



Check out our
RSS feeds!
  • Upcoming Content: Whatever happened to Comodo Time Machine?
  • Upcoming Content: SuperSpeed RamDisk Plus 11 Software Review
  • Upcoming Content: HP Envy TouchSmart 4 Touchscreen Ultrabook Laptop Review
  • Upcoming Content: MSI Radeon HD 7790 1GB OC Overclocked Video Card Review
  • Upcoming Content: Transcend 32GB Wi-Fi SDHC Review
  • Upcoming Content: Transcend StoreJet Cloud 32GB Wireless Storage Device Review
  • Upcoming Content: ADATA DashDrive Elite UE700 USB 3.0 Flash Drive Review
  • Upcoming Content: Kingston DT Workspace 64GB 'Windows To Go' USB 3.0 Flash Drive Review
  • Upcoming Content: Lexar Professional 128GB Compact Flash Memory Card Review
  • Upcoming Content: MyDigitalSSD BP4 240GB mSATA Review

Hacking & Security News Posts

View More Hacking & Security News Posts

TweakTown Web Poll

Question: What new stuff are you most excited to see at Computex Taipei 2013?

Cases, Coolers & PSU’s

CPU's

Gadgets

GPU's & Video Cards

Keyboards & Mice

Laptops, Tablets & Phones

Motherboards & Chipsets

New Tech

SSD's & Memory

Booth Babes

or View the Results

View More Polls

Forum Activity

View More Forum Posts

Hacking & Security Press Releases

View More Hacking & Security Press Releases