Not Dead Yet: Microsoft Issues Critical Security Patch for Windows XP

Not Dead Yet: Microsoft Issues Critical Security Patch for Windows XP

The incredible success of Windows XP has been something of a double-edged sword for Microsoft. On one hand, it dominated the desktop PC space for years with that OS, but it also struggled to move beyond XP. After trying for years to end update support, Microsoft finally retired XP five years ago. And yet, Microsoft just found a bug so severe that it has issued another patch for the aging operating system. The remaining Windows XP users out there might never know it exists, though.

Microsoft has only provided vague details of the vulnerability, saying that it affects the Remote Desktop component of Windows. The Remote Desktop Protocol (RDP) Microsoft uses isn’t vulnerable, but the flaw lies in the underlying implementation of remote desktop functionality. Thus, it’s “pre-authentication” and requires no user interaction. Microsoft says that makes the vulnerability “wormable,” meaning it could spread from one vulnerable computer to the next as the WannaCry malware did in 2017.

The vulnerability affects several Windows products including Windows 7, Windows Server 2008, Windows Server 2003, and Windows XP. Of those, only Server 2003 and XP are completely out of support. Windows 8 and newer are not affected. Systems that currently get updates will have the patch routed through Windows Update. Windows XP and Server 2003 users will need to manually download and install it, which very few of them are likely to do. Microsoft advises XP users to upgrade, but anyone still using XP probably has a reason even if that reason is just extreme laziness.

Not Dead Yet: Microsoft Issues Critical Security Patch for Windows XP

Even though Microsoft has not disclosed the exact flaw, even pointing people to the remote desktop functionality all but ensures that someone will devise an attack in the coming days. Security experts expect to see fully automated attacks based on this vulnerability that could spread any kind of malware imaginable.

Continue reading

Xbox Series X Launch Is Microsoft’s Biggest Ever, Causes ISP Traffic Spike
Xbox Series X Launch Is Microsoft’s Biggest Ever, Causes ISP Traffic Spike

Microsoft claims the Xbox Series X is its most successful debut in history and specifically calls out the Xbox Series S for bringing new players into the fold.

Microsoft: Bethesda Games ‘Either First or Better’ on Xbox, Not Exclusive
Microsoft: Bethesda Games ‘Either First or Better’ on Xbox, Not Exclusive

Microsoft's Tim Stuart doesn't think the company will try to cut PS5 gamers out of future Bethesda titles. The company wants Xbox to be the best destination for its games, but not the only one.

Microsoft: Pluton Chip Will Bring Xbox-Like Security to Windows PCs
Microsoft: Pluton Chip Will Bring Xbox-Like Security to Windows PCs

Intel, AMD, and Qualcomm are working to make Pluton part of their upcoming designs, which should make PCs more difficult to hack, but it also bakes Microsoft technology into your hardware.

Apple: ‘It’s Up to Microsoft’ to Get Windows Running on New ARM Macs
Apple: ‘It’s Up to Microsoft’ to Get Windows Running on New ARM Macs

According to Apple, the question of supporting Windows on the M1 is entirely in Microsoft's court.