IT News Thread, Microsoft contains Flame malware with update to WSUS (KB2720211) in Other News; Posting this just in case it affects any EduGeek's. More details here .
Following a groundbreaking cryptographic attack that hijacked ...
9th June 2012, 11:45 AM #1
Microsoft contains Flame malware with update to WSUS (KB2720211)
Posting this just in case it affects any EduGeek's. More details here.
Following a groundbreaking cryptographic attack that hijacked the platform Microsoft uses to deliver updates to millions of large customers, the company has issued changes designed to prevent similar exploits from working again. The company's Windows Server Update Services, which businesses and organizations use to deliver patches to large fleets of PCs, will no longer work through network proxies that use deep packet content inspection, Microsoft representatives said in an advisory published Friday afternoon. Such proxies act as man-in-the-middle devices that can peek inside encrypted traffic as it travels from a local network onto the Internet. Enterprises that have inspection servers in place will have to create exception rules so all Windows Update traffic is bypassed.
The changes are designed to blunt the kind of attacks carried out by Flame, the sophisticated espionage software that infected PCs in Iran and other Middle Eastern countries. As revealed earlier this week, the malware hijacked the Windows Update process to spread from machine to machine within a local network. By hacking a Microsoft licensing service to sign malware stored on one infected computer, Flame could disguise the malicious payload as a Windows update that should be installed by other computers on the same network.
Microsoft has also provided cryptographic hashes that will accompany all future Windows Updates. It is signed with a private key that only Microsoft possesses, making it infeasible for attackers to include the same certification. (Source
IDG Tech News
By IT_Man_Dan in forum MIS Systems
Last Post: 20th December 2011, 10:50 AM
By AngryTechnician in forum IT News
Last Post: 24th March 2011, 09:36 PM
By kennysarmy in forum Windows
Last Post: 24th June 2010, 03:49 PM
By somabc in forum Web Development
Last Post: 18th November 2009, 01:15 PM
Last Post: 20th October 2006, 05:14 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)