A new zero day vulnerability has put Windows 7 and Windows 10 in jeopardy: Microsoft has already corrected it with the latest patch
Table of contents:
Windows is back in the pillory. And it does so for an unpleasant reason, such as the discovery of a new vulnerability that affects Microsoft's latest operating system. A security breach that has been revealed by Kaspersky Lab and of which they speak referring to a certain severity.
A _bug_ through which a malicious hacker could take full control of the operating system and that affects both Windows 7 and to Windows 10, always in 64-bit versions and that had been totally unknown until now, when its coming to light has facilitated its patch with the latest update.
A zero day vulnerability
The vulnerability has been named CVE-2019-0859 and resides in the Windows kernel. It affects both Windows 7 and Windows 10 and allows privilege escalation to introduce malware to infected computers.
It is a vulnerability that allows full access to the infected computer. And by total we mean that the cybercriminal can install programs, delete data, create new users... as we see a complete list of actions.
The problem is that here we ran into a zero-day vulnerability and it is due to a backdoor that exploits a previously unknown bug in the system. An unknown vulnerability in the Microsoft Windows operating system that originates from a backdoor in the win32k kernel.sys, through which a malicious attacker can gain control of the computer.
Once the infection is launched via a script, another one available on Pastebin, the popular site for storing source code, is executed. In this way, it opens the back door developed with a legitimate element of Windows, present in all computers with the Microsoft operating system. This is Windows PowerShell. This prevents detection of the threat while attackers gain control of the infected system.
Microsoft has fixed this problem with the latest update released in Patch Thursday, so we advise you to keep your computer up to date on Regarding updates if you want it to be protected against threats, including those that until now were unknown.
Source | Kaspersky Lab Via | Hardwareviews
