Patch Tuesday aftermath: The NSA Crypt32 threat is real, but not yet imminent

Credit to Author: Woody Leonhard| Date: Wed, 15 Jan 2020 07:26:00 -0800

Get ready for your local news station’s weather reporter to start lecturing on the importance of installing Windows patches.

Yesterday we were treated to a remarkable Patch Tuesday. “Remarkable” specifically in the sense that the U.S. National Security Agency was moved to put out a press release (PDF):

NSA recommends installing all January 2020 Patch Tuesday patches as soon as possible to effectively mitigate the vulnerability on all Windows 10 and Windows Server 2016/2019 systems.

To read this article in full, please click here

Read more

Breaking iPhone encryption won't make anyone safer

Credit to Author: Jonny Evans| Date: Wed, 15 Jan 2020 05:06:00 -0800

Imagine all your tax documentation could be examined by officials from any government merely on suspicion. That’s the future some governments are pushing for when they demand Apple puts security backdoors into its products.

Making no one safe

Think about the nature of security backdoors:

To read this article in full, please click here

Read more

Patch Tuesday, January 2020 Edition

Credit to Author: BrianKrebs| Date: Wed, 15 Jan 2020 02:31:50 +0000

Microsoft today released updates to plug 50 security holes in various flavors of Windows and related software. The patch batch includes a fix for a flaw in Windows 10 and server equivalents of this operating system that prompted an unprecedented public warning from the U.S. National Security Agency. This month also marks the end of mainstream support for Windows 7, a still broadly-used operating system that will no longer be supplied with security updates.

Read more

Microsoft to Windows 7: Beat it, you bum

Credit to Author: Gregg Keizer| Date: Tue, 14 Jan 2020 12:36:00 -0800

Microsoft today figuratively told Window 7 – which ended support with a final security update – not to let the door hit it on the way out.

“Ten-year-old tech just can’t keep up,” Jared Spataro, an executive on the Microsoft 365 team, wrote in a post to a company blog. “As we end support for Windows 7, I encourage you to transition to these newer options right away.”

Not surprisingly, Spataro named those newer options as Windows 10 to replace Windows 7, and Office 365 to fill in for the retiring-in-October Office 2010. Combined, they make up the bulk of Microsoft 365, the business subscription plan Microsoft wants all customers to adopt.

To read this article in full, please click here

Read more

Apple refuses latest government iPhone-unlock request

Credit to Author: Lucas Mearian| Date: Tue, 14 Jan 2020 12:30:00 -0800

Apple turned down a request from U.S. Attorney General William Barr this week,  saying it will not help unlock two iPhones used by a terrorist suspect last month in the deadly shooting at the Naval Air Station in Pensacola, Fla.

Barr said the shooter, 21-year-old Mohammed Saeed Alshamrani, acted alone when he shot and killed three service members and wounded several others, including two sheriff’s deputies responding to the attack. Alshamrani, a member of the Saudi Air Force and an aviation student at the base, was shot dead on the scene by police.

To read this article in full, please click here

Read more

Today's Patch Tuesday brings fireworks and — a magic bullet?

Credit to Author: Woody Leonhard| Date: Tue, 14 Jan 2020 05:48:00 -0800

Over the past few years we’ve seen a few security holes that have drawn Chicken Little warnings and vast amounts of unthinking press reports. When you turn on a local news program and hear from the hometown weather reporter that you really need to get Windows patched, a bit of skepticism might be in order.

Today’s Patch Tuesday appears to be headed down the same well-worn chute.

Brian Krebs, the security guru with impeccable credentials, fired an opening salvo in his blog post yesterday:

To read this article in full, please click here

Read more

Seven high points of Windows 7

Credit to Author: Gregg Keizer| Date: Tue, 14 Jan 2020 04:16:00 -0800

Today Microsoft issues its final free security update for Windows 7, putting an end to that operating system’s decade.

To remember that service – a retirement party but without the cloyingly-sweet cake and cheap gold watch – Computerworld selected seven highlights of Windows 7. While the seven do not pretend to trace Windows 7’s history, they illustrate the influence and impact of the OS.

Here’s to Windows 7. Raise a glass, for cryin’ out loud.

It salvaged Microsoft’s reputation after the Vista debacle

The numbers say it all.

Windows Vista, the 2006 replacement for Windows XP, topped out at 20% of all Windows versions in October 2009. Even though the OS it followed was long in the tooth – XP was nearly twice the age of a typical version when it was supplanted – Vista struggled to put a dent in its forerunner’s share.

To read this article in full, please click here

Read more

Saying goodbye to Windows 7 isn’t easy, but you must

Credit to Author: Steven J. Vaughan-Nichols| Date: Tue, 14 Jan 2020 03:00:00 -0800

Listen, I get it. Windows 7 has worked really well. After the Vista fiasco, you were so happy to get a decent version of Windows. You dodged the Windows 8.x sinkhole, and, boy, were you glad! Then, you thought about Windows 10, but 7 just did the job so you stuck with it, and then you felt vindicated because of Windows 10’s dodgy upgrades and patches. Now, today, Jan. 14, 2020, Windows 7 has reached its end of life, and either you’ve upgraded to Windows 10 or you’re working on another Windows 7 alternative like Chrome OS, macOS or Linux, right?

To read this article in full, please click here

Read more

Cryptic Rumblings Ahead of First 2020 Patch Tuesday

Credit to Author: BrianKrebs| Date: Mon, 13 Jan 2020 22:17:47 +0000

Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S. military and to other high-value customers/targets that manage key Internet infrastructure, and that those organizations have been asked to sign agreements preventing them from disclosing details of the flaw prior to Jan. 14, the first Patch Tuesday of 2020.

Read more