Experts: Don't panic over Windows flaw

Munir Kotadia | February 11, 2004 1:31 PM PST

Summary

Security pros say that there's no indication that any hackers have exploited the latest Windows flaw but that doesn't mean it couldn't happen soon.

Topics

Windows users have been told not to panic after news of the latest Windows security bug made front page headlines in many of the world's newspapers.

Antivirus company Sophos has advised users to keep a sense of proportion and "calmly ensure all computers are correctly patched". The company said that as yet, there have not been any hackers or worms exploiting the flaws.

Graham Cluley, senior technology consultant at Sophos said: "With doom-laden headlines in the newspapers about this bug in Windows, users need to keep a sense of proportion. At the moment we haven't seen any hackers or worms exploiting this hole, but that doesn't mean that computer users don't need to protect their PCs."

"This announcement couldn't have come at a worse time for Microsoft, as it tries to build its reputation for security," said Cluely.

Antivirus company TruSecure confirmed that there have so far been no incidents exploiting the security hole, which affects the way Windows handles digital certificates.

TruSecure said business should give highest priority for patching to domain controllers, Exchange servers, Internet Information Servers (IIS) which use certificates and VPN and firewall appliances that accept authenticated connections.

"Microsoft's critical network security infrastructure components must be patched immediately to ensure the on-going, and significant trust businesses place in them," said TruSecure chief scientist Russ Cooper in a statement.

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity