The Sun |
Personal details of thousands of UK drivers revealed in 'huge data …
The Sun THOUSANDS of parking payment app users have been put at risk of having their personal details breached. |
Enlarge (credit: NSA)
Contrary to what Ars and the rest of the world reported Friday, none of the published exploits stolen from the National Security Agency work against currently supported Microsoft products. This is according to a Microsoft blog post published late Friday night.
That’s because the critical vulnerabilities for four exploits previously believed to be zerodays were patched in March, exactly one month before a group called Shadow Brokers published Friday’s latest installment of weapons-grade attacks. Those updates—which Microsoft indexes as MS17-010, CVE-2017-0146, and CVE-2017-—make no mention of the person or group who reported the vulnerabilities to Microsoft. The lack of credit isn’t unprecedented, but it’s uncommon, and it’s generating speculation that the reporters were tied to the NSA. In a vaguely worded statement issued Friday, Microsoft seemed to say it had had no contact with NSA officials concerning any of the exploits contained in Friday’s leak.
Microsoft provided the following table showing when various vulnerabilities were patched:
Read 7 remaining paragraphs | Comments
ISBuzz News |
FireEye Blog: Microsoft Zero-Day Vulnerability
ISBuzz News Actors leveraging FINSPY and LATENTBOT used the zero-day as early as January and March, and similarities between their implementations suggest they obtained exploit code from a shared source. Recent DRIDEX activity began following the disclosure … |
|
Dear China, I am a white guy and not a spy
South China Morning Post Citizens have been asked to report suspicious foreigners in the Chinese capital. Photo: Simon Song. “There's been a lot of fear about ideological intrusion and espionage since the Arab spring”, added the old China hand. Another theory to explain the … |