Patch Your PC: Yet Another Massive Exploit Discovered

Microsoft has issued three updates to fix flaws in older, unsupported versions of Windows. It's an unusual move that follows the discovery that both the National Security Agency (NSA) and outside hackers are exploiting the flaws, similar to the one that allowed the WannaCry Ransomware worm to spread just a few weeks ago.

The updates cover both Windows and Windows Server editions going right back to XP. They'll be issued through the usual automated updates, which means people on Windows 8.1 and later shouldn't need to do anything. Those on earlier systems may need to manually download and install the updates if they have previously switched off automatic updates or are using older editions that are no longer supported.

Update Follows WannaCry Attacks

Issuing patches for software such as Windows XP, which is long out of its support cycle, is not something Microsoft expected to be doing in 2017. This is the second time this year it's been forced to do so, following on from the discovery of vulnerabilities that led to the "Wannacry" (or "WannaCrypt") ransomware attack that put hundreds of thousands of computers out of action worldwide, most notably in the United Kingdom's health service network.

According to Microsoft, this isn't a change in its standard policy. Instead this is an exceptional move that it made because the bugs in question are "at heightened risk of exploitation due to past nation-state activity and disclosures." It adds that this risk includes "potential attacks with characteristics similar to WannaCrypt." (Source: windows.com)

NSA Breach May Be Factor

Usually the term "nation-state activity" would suggest a foreign government trying to spy on an enemy. In this case it appears the nation in question might actually be the US, with the National Security Agency discovering and exploiting bugs as part of its cyber surveillance work, only to have itself be breached, thus putting the details of the bugs into the hands of hackers.

Issuing special security updates for Windows XP does not mean it's safe to stick with the old system, just because Microsoft will always patch the "most serious" of bugs. Security experts point out that any unpatched computer can easily be exposed to malware that can be just as damaging as WannaCry. That said, WannaCry spread as fast as it did because all Windows systems were vulnerable to attack at the same time, making the strike especially easy. (Source: zdnet.com)

How to Patch Your System

If your system is still supported with security updates, you can use Windows Update to download the security patches - but ONLY if your Windows Update is working properly - here's how to know. For systems that are no longer supported, or if your Windows update is broken, you may need to download patches manually - described next.

Manually updating:

For customers using Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows 8.1 RT, Windows Server 2012 R2, Windows 10, or Windows Server 2016, refer to Microsoft Knowledge Base Article 4025686 and download all the patches that pertain to your operating system.

For customers using Windows XP, Windows Vista, Windows 8 (not Windows 8.1), Windows Server 2003, or Windows Server 2003 R2 see Microsoft Knowledge Base article 4025687, and download all the patches that pertain to your operating system.

Yet Another Option: Upgrade to Windows 10 - FOR FREE

Here's something most people don't know: you can upgrade to Windows 10 ABSOLUTELY FREE without having to pay for it and without ever entering an activation license. That said, certain parts of Windows 10 will be locked (such as personalizing the desktop with a background, for example) and your desktop screen will be watermarked as "not activated", unless you pay for the activation. That should not be a problem for most, considering that the operating system is secure and updated regularly.

If you're still running Windows XP or Vista and your hardware is supported with Windows 10 - now is the time to upgrade! A brief rundown of what is required: check to see if your hardware is supported; if so: create a disk image backup of the system, download the Windows 10 ISO, burn it to DVD or USB thumb drive, format the C drive and install Windows 10 clean, restore your user data from the disk image backup, reset permissions on the user data, reinstall your programs, install Windows 10 anti-spy program(s), a new start menu, etc. For most people this won't be an easy task in of itself; as such you are welcome to contact Dennis for remote desktop support and he can manage the entire process for you - described next.

Additional 1-on-1 Support: From Dennis

If your Windows Update is broken and you need help fixing it, or if you're using an unsupported / outdated version of Windows and wish to upgrade to Windows 10 - for free - I can manage the entire thing for you using my remote desktop support service. Simply contact me, briefly describing the issue and I will get back to you as soon as possible.

What's Your Opinion?

Has Microsoft got the right balance of patching XP to mitigate the worst bugs while still encouraging people to upgrade? Do you know of anyone still on XP and are they aware of the risks? Should people running older, insecure software be left to it, or does it pose too much risk to other computer users through spreading malware?