Microsoft: 25,000 PCs attacked with latest Windows zero day

[severedsolo]

The Windows Help and Support Center vulnerability that was patched with yesterday’s MS10-042 bulletin was under active attack by malware miscreants, especially in Europe where Microsoft tracked about 25,000 attempts to exploit the vulnerability.


According to Microsoft’s Holly Stewart, the attacks escalated significantly when the company announced the issue would be fixed in this month’s Patch Tuesday.

In a blog post to the Microsoft Malware Protection Center (MMPC) blog, Stewart said the attacks started a few weeks ago and have continued to expand and some new attack patterns have come into play.

Microsoft: 25,000 PCs attacked with latest Windows zero day | ZDNet

 

[logicearth]

And of course you are safe if you are not running Windows XP

 

[CarlTR6]

And of course you are safe if you are not running Windows XP

 

[JonM33]

And of course you are safe if you are not running Windows XP

Heh, heh...not.

Microsoft Security Bulletin MS10-042 - Critical: Vulnerability in Help and Support Center Could Allow Remote Code Execution (2229593)

It's actually Windows XP SP2 and SP3 that this critically affects. Windows 7 32-bit and 64-bit are not affected.

 

[maranello]

old news = new news

every year the same problem with some Microsoft product, maybe someday they will really understand the notion of security (win7 is a start)

 

[fseal]

It's not just microsoft. Checkout secunia.com. It's everything on every OS. Specifically look up Opera, FireFox and Internet Explorer for a little eye opening.

Sadly though Larger companies like Microsoft are doing their best to be serious about it. Joe bedroom plugin programmer is not, so vulnerabilites will /always/ be creeping in as long as "anyone" can write software for any particular platform.

Of course being a coder I hope that the day that all software has to be "verified" by official sanctioning government bodies NEVER comes. The problems with virii are miniscule compated to that dystopian future

 

[JonM33]

old news = new news

every year the same problem with some Microsoft product, maybe someday they will really understand the notion of security (win7 is a start)

Apple and Linux are affected with their own as well and require updates.

 

[pparks1]

Apple and Linux are affected with their own as well and require updates.

Absolutely true. There are lots of updates for Linux boxes...I can attest to that. Of course, some are security related, while others are simply additions, fixes, documentation updates, new versions, etc....so it sometimes muddies the water when you evaluate them based on a sheer # perspective.

 

[Win7User512]

old news = new news

every year the same problem with some Microsoft product, maybe someday they will really understand the notion of security (win7 is a start)

I've been tempted for some time to read this book. I've only flipped through it.

How We Test Software at Microsoft, Alan Page, Book - Barnes & Noble

 

[maranello]

i agree with you guys, as long as there will be internet, we can be sure that hackers will find a way to penetrate every company / software

we can just hope that one day things will radically change and the vulnerability of systems will no longer be an issue... (wild guess, i know)

 

[Layback Bear]

I share your dream maranello. Tomorrow would the right day for me.

 

[JonM33]

Apple and Linux are affected with their own as well and require updates.

Absolutely true. There are lots of updates for Linux boxes...I can attest to that. Of course, some are security related, while others are simply additions, fixes, documentation updates, new versions, etc....so it sometimes muddies the water when you evaluate them based on a sheer # perspective.

Yeah, the latest version of Linux Mint 9 is based upon Ubuntu 10.04. Yet a fresh install still needs 219 updates. It was released May 18.