Featured Post

Twenty Practical Steps to Better Corporate Governance | The Corporate Secretaries International Association (CSIA)

Twenty Practical Steps to Better Corporate Governance | The Corporate Secretaries International Association (CSIA) Please click the li...

Monday, May 15, 2017

Microsoft blames US stockpiled vulnerability for ransomware attack

http://ift.tt/eA8V8J

Microsoft on Sunday said a software vulnerability stolen from the U.S. National Security Agency has affected customers around the world, and described the spread of the WannaCrypt ransomware on Friday in many countries as yet another example of the problems caused by the stockpiling of vulnerabilities by governments.

Referring to the attack as a “wake-up call,” Microsoft’s President and Chief Legal Officer, Brad Smith wrote in a blog post that governments have “to consider the damage to civilians that comes from hoarding these vulnerabilities and the use of these exploits.”

The ransomware, also called WannaCry or Wana Decryptor, works by exploiting a vulnerability in some older versions of Windows. It has been suspected for some time now that the malware came from a cache of hacking tools reportedly stolen by hacking group Shadow Brokers from the NSA and leaked on the internet. WannaCry is said to take advantage of a NSA hacking tool, called EternalBlue, that can make it easy to hijack unpatched older Windows machines.

To read this article in full or to leave a comment, please click here

May 15, 2017 at 09:02AM

http://ift.tt/2r7EPl9

from John Ribeiro

http://ift.tt/2r7EPl9


No comments:

Post a Comment