Hackers quick to exploit latest Windows flaws

Security experts are warning users to act immediately to stave off the ill-effects of a worm that exploits one of the vulnerabilities Microsoft issued a patch for just last week.

The Cuebot-L and Cuebot-M worms exploit the hole outlined last week in Microsoft's MS06-040 security bulletin, according to security specialist Sophos. They breed through AOL instant messenger, and once they've infected a PC, they disable the firewall and open up a door for remote hackers to gain control.

The security notification, dubbed Patch Tuesday, highlighted 12 flaws in need of fixing. It propelled the number of critical flaws found in the software giant's products to a record level.

The rising number and severity of the vulnerabilities led experts to suggest that the backlog of unpatched issues would provide prime fodder for hackers.

According to this latest warning from Sophos, it would seem they were right.

"As Microsoft only issued a patch against this vulnerability last week, many Windows computers probably remain unpatched and vulnerable to these threats," said Carole Theriault, a senior security consultant at Sophos.

"Microsoft is once again in the difficult situation of trying to convince its customers that Windows is becoming more secure, despite this onslaught of malware designed to exploit its vulnerabilities. As always, users are encouraged to take the necessary steps to ensure their PCs are properly protected with up-to-date security patches, anti-virus software and a firewall, as soon as possible."

In response to the deluge of patches demanding users' attention, the US Department of Homeland Security also stepped in, urging users to protect themselves against such malice.

The alert warned: "Windows Operating Systems users are encouraged to avoid delay in applying this security patch. Attempts to exploit vulnerabilities in operating systems routinely occur within 24 hours of the release of a security patch.

"This vulnerability could impact government systems, private industry and critical infrastructure, as well as individual and home users."

On Friday, anti-virus specialist Kaspersky Labs warned that businesses should be on their guard against a new breed of crossover IM worms that pose a huge danger to corporate networks.

Email to a friend

Print this page

Social Bookmark this article: What is this?

Digg

Delicious

Reddit

StumbleUpon

Slashdot

Google

Facebook