Microsoft warns of yet another new critical Windows security flaw

“Microsoft Corp. warned computer users Wednesday about a new critical security hole in its Windows operating system that could allow an attacker to gain control over a computer, delete data and install unwanted programs,” Reuters reports. “The vulnerability is similar to one that Microsoft warned about in July, which experts called one of the worst to hit a software program in years because of the broad number of Windows systems affected.”

“Hackers apparently have not yet targeted the newly announced vulnerability, said Jeff Jones, senior director of Trustworthy Computing security at Redmond, Wash.-based Microsoft. But with any critical flaw, ‘we have a worry that history has shown us there are malicious individuals out there that could create an attack of some sort against it,’ he said,” Reuters reports. “The operating systems affected by the latest security vulnerabilities are Windows NT 4.0, Windows 2000, Windows XP and Windows Server 2003. Older versions of Windows, including Windows Millennium, Windows 98 and Windows 95, are not affected, the company said.”

“‘It’s pretty much like instant replay,’ said Marc Maiffret, chief hacking officer at eEye Digital Security, which discovered the latest critical flaw. ‘I can’t even imagine the frustration level administrators will be feeling today,’ he said. There are critical Windows flaws occasionally, but ‘never before have we had another one so soon,’ he said, adding that he thinks there is a good chance there will be another worm that will exploit the new flaw,” Reuters reports.

“Since early last year, Microsoft has made software security a top priority in an attempt to address rising customer concerns about the spread of viruses and hacker attacks. Last week Microsoft warned of an important flaw in its Office software that could enable a malicious programmer to create documents that would launch attacks on unsuspecting users,” reports Reuters. “There have been about 40 warnings from Microsoft of security flaws, rated either critical, important, moderate and low, since the beginning of this year, according to data posted at the Microsoft security bulletin Web site. Last year, there were a total of 72 bulletins issued, Jones said.”

“Jones advised Windows users to get information and download a patch that fixes the critical vulnerabilities, as well as other less-serious ones the company discovered. The patch is available here. Microsoft is also urging customers to install a firewall to block out intruders and enable the Windows auto update feature, which allows security and other software to be updated and installed automatically. The Web site for that is here,” Reuters reports. Full article here.

CNET is reporting, “Microsoft identified three vulnerabilities in Windows on Wednesday that could have a similar effect to that of the dreaded MSBlast worm of August.” Full report, “Windows flaws allow PC takeover” here.

MacDailyNews Take: We don’t know whether to laugh or cry. Windows users, please protect yourselves and patch your systems. Microsoft is urging customers to do many things; MacDailyNews, as always, has a better suggestion: Get a Mac and enjoy your time computing. More information on how to add a Mac to your computing arsenal or switch completely from Windows to Mac OS X here.

32 Comments

  1. After reading MacDailyNews every day for the past three months and enduring the hell, and I mean hell, of Windows XP and that that goes with it, I’m DONE!

    Today, I ordered a 1.8GHz PowerPC G5 to replace my self-built Windows XP box. Once I get my files and stuff across, the Windows machine gets donated to the YMCA.

    I feel free already!!!

  2. No pain, no gain. The burden of losing man-hours to resurrecting systems, not to mention money and lost data, has not yet sunk in to the accountants. Maybe the stockholders would crack the whip over the most stupid corporations. Then again, maybe they won’t.

  3. Ralph, unless you turned off your email and Internet Explorer and turned on your firewire wall, I’d bet your security costs are $ 40-200 above mine (not counting the base price of the computer). Because I didn’t buy any anti-virus software.

  4. I’ve heard from those who have met with him that Bill Gates can be an unstable drool-slinging spaz in meetings. Can you imagine being the poor soul who had to break the news to him that yet another flaw (but virtually the same as the last one) was found. Yikes!

  5. How ’bout Pulk/Pull Revolving Doors 2003! ” width=”19″ height=”19″ alt=”wink” style=”border:0;” />

    BTW, I didn’t even bother myself to read the story, I just went straight to the MDN comment and the posts. I think I actually learn more.

    And FWIW, a Windows machine (aka ‘A REAL BUSINESS COMPUTER) (haha) may cost ‘6.23%’ (or3.26% or 2.63% ??) less than a comparable Mac (that means equipped with the same brand-name parts as a brand-name PC), the moment you plunk it down on the salescounter. Wait till you get it home and try to use it for anything but games.

  6. I work in an all-PC company. The numbskull IT dept has almost all the computers set so that the users do not have permission to run Windows Update. You need to call IT. There are 1500 PC’s that need to be patched. What a joke.

  7. Congratulations, Former Windows Sufferer – and welcome!

    You will not only be getting the best operating system (and best computer) you can get, but you’ve also got the Mac community to help you out if you need something! No charge for that! And, IMHO, nothing comparable to us on the Dark Side! ” width=”19″ height=”19″ alt=”grin” style=”border:0;” />

  8. “eXtremely Pathetic” – I like it. How about “aXident Prone”, or “eXhausting Pugnaciousness”, or “eX-Parrot”? Okay, the last one’s a little obscure, unless you’re a Monty Python fan.

    Any other good ones?

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.