Live
- Government Launches Uniform Diet Plan to Boost Student Health and Education
- Robust Security Arrangements for TSPSC Group-2 Exams in Jogulamba Gadwal
- National Lok Adalat Resolves 3387 Cases at Alampur Court
- ‘Get Set, Grow Summit 2024’ Focuses on Digital Detox for Families
- Stokes motivates his team to put in extra effort, says England pacer Potts
- From overcoming setbacks to leading India in U19 Women’s Asia Cup, Niki Prasad's amazing journey
- Driving Enterprise Security: Inside Venkata Reddy Thummala’s Leadership Journey
- Constitution debate: PM Modi hails 'Nari Shakti'; makes strong pitch for 'United Bharat’
- Abhijeet Bhardwaj: Revolutionizing Enterprise Analytics with Innovation and Expertise
- Bihar: Inquiry initiated against principal who went to buy veggies during school hours
Your Windows PC is also vulnerable to FREAK attacks, warns Microsoft
Highlights
Hundreds of millions of Windows PC users are vulnerable to attacks exploiting the recently uncovered \"Freak\" security vulnerability, which was initially believed to only threaten mobile devices and Mac computers, Microsoft Corp warned.
Boston: Hundreds of millions of Windows PC users are vulnerable to attacks exploiting the recently uncovered "Freak" security vulnerability, which was initially believed to only threaten mobile devices and Mac computers, Microsoft Corp warned.
News of the vulnerability surfaced on Tuesday when a group of nine security experts disclosed that ubiquitous Internet encryption technology could make devices running Apple Inc's iOS and Mac operating systems, along with Google Inc's Android browser vulnerable to cyberattacks.
Microsoft released a security advisory on Thursday warning customers that their PCs were also vulnerable to the "Freak" vulnerability.
The weakness could allow attacks on PCs that connect with Web servers configured to use encryption technology intentionally weakened to comply with US government regulations banning exports of the strongest encryption.
If hackers are successful, they could spy on communications as well as infect PCs with malicious software, the researchers who uncovered the threat said on Tuesday.
The Washington Post on Tuesday reported that whitehouse.gov and fbi.gov were among the sites vulnerable to these attacks, but that the government had secured them.
Security experts said the vulnerability was relatively difficult to exploit because hackers would need to use hours of computer time to crack the encryption before launching an attack.
"I don't think this is a terribly big issue, but only because you have to have many ducks in a row," said Ivan Ristic, director of engineering for cybersecurity firm Qualys Inc.
That includes finding a vulnerable web server, breaking the key, finding a vulnerable PC or mobile device, then gaining access to that device.
Microsoft advised system administrators to employ a workaround to disable settings on Windows servers that allow use of the weaker encryption. It said it was investigating the threat and had not yet developed a security update that would automatically protect Windows PC users from the threat.
Apple said it had developed a software update to address the vulnerability, which would be pushed out to customers next week.
Google said it had also developed a patch, which it provided to partners that make and distribute Android devices.
‘Freak’ stands for Factoring RSA-EXPORT Keys.
Next Story
ADVERTISEMENT
