Windows PC users also vunerable to ‘freak’ attacks, warns Microsoft

BOSTON — Hundreds of millions of Windows PC users are vulnerable to attacks exploiting the recently uncovered “Freak” security vulnerability, which was initially believed to only threaten mobile devices and Mac computers, Microsoft Corp warned.

News of the vulnerability surfaced on Tuesday when a group of nine security experts disclosed that ubiquitous Internet encryption technology could make devices running Apple Inc’s iOS and Mac operating systems, along with Google Inc’s Android browser vulnerable to cyber attacks.

Microsoft released a security advisory on Thursday warning customers that their PCs were also vulnerable to the “Freak” vulnerability.

The weakness could allow attacks on PCs that connect with Web servers configured to use encryption technology intentionally weakened to comply with U.S. government regulations banning exports of the strongest encryption.

If hackers are successful, they could spy on communications as well as infect PCs with malicious software, the researchers who uncovered the threat said on Tuesday.

The Washington Post on Tuesday reported that whitehouse.gov and fbi.gov were among the sites vulnerable to these attacks, but that the government had secured them. (wapo.st/18KaxIA)

Security experts said the vulnerability was relatively difficult to exploit because hackers would need to use hours of computer time to crack the encryption before launching an attack.

“I don’t think this is a terribly big issue, but only because you have to have many ducks in a row,” said Ivan Ristic, director of engineering for cybersecurity firm Qualys Inc.

That includes finding a vulnerable web server, breaking the key, finding a vulnerable PC or mobile device, then gaining access to that device.

Microsoft advised system administrators to employ a workaround to disable settings on Windows servers that allow use of the weaker encryption. It said it was investigating the threat and had not yet developed a security update that would automatically protect Windows PC users from the threat.

Apple said it had developed a software update to address the vulnerability, which would be pushed out to customers next week.

Google said it had also developed a patch, which it provided to partners that make and distribute Android devices.

“Freak” stands for Factoring RSA-EXPORT Keys.

ad-high_impact_4
Life
Kids become firefighters at Fire Station 98 open house
Henderson residents wore fire hats, learned about CPR and met firefighters at the Fire Station 98 open house Saturday, August 11, 2018. (Marcus Villagran Las Vegas Review-Journal) @brokejournalist
People from all over the world attend RollerCon 2018
RollerCon 2018 is a five-day convention focused on the roller derby community and culture at Westgate in Las Vegas. (Marcus Villagran/Las Vegas Review-Journal) @brokejournalist
Camp Broadway teaches kids how to sing and dance
The Smith Center's seventh annual Camp Broadway musical theater program gives 150 kids ages 6-17 an opportunity to learn musical theater skills from industry professionals over a five-day period. Marcus Villagran/ Las Vegas Review-Journal @brokejournalist
Las Vegas police officer on being PETA's Sexiest Vegan Next Door
Las Vegas police officer David Anthony talks vegan lifestyle and how he feels about being voted PETA's sexiest Vegan next door from his home on Monday, July 9, 2018. (Marcus Villagran/Las Vegas Review-Journal) @brokejournalist
'NO H8' Campaign comes to Las Vegas
Hundreds of locals participate in the NO H8 campaign founded by Adam Bouska and Jeff Parshley as a response to Proposition 8, a California ban on same-sex marriage. The campaign has since evolved to represent equal treatment for all. (Marcus Villagran/Las Vegas Review-Journal) @brokejournalist
Over 40,000 People Attend The 4th Of July Parade In Summerlin In Las Vegas
Over 40,000 People Attend The 4th Of July Parade In Summerlin In Las Vegas. (Janna Karel Las Vegas Review-Journal)
Star Wars and Golden Knights mashup at downtown art shop
Star Wars and Vegas Golden Knights fans attend the Boba Fett Golden Knight Paint Class at The Bubblegum Gallery in Las Vegas, Friday, June 29, 2018. (Marcus Villagran/Las Vegas Review-Journal) @brokejournalist
Bark-Andre Furry meets Capitals superfan Ovie the Bulldog
Two of NHL's furriest fans met at the Forum Shops in Caesars Palace on Tuesday, June 18, 2018, in Las Vegas. Vegas Golden Knights superfan Bark-Andre Furry and Washington Capitals superfan Ovie the Bulldog shared a plate of meatballs and spaghetti with help from Logan, "The Girl with the Hat." (Marcus Villagran/Las Vegas Review-Journal) @brokejournalist
TOP NEWS
News Headlines
Add Event
Home Front Page Footer Listing
Circular
You May Like

You May Like