Rumors mount that a major bug could be disclosed on the day Microsoft ends support for Windows 7 – PCWorld

Rumors mount that a major bug could be disclosed on the day Microsoft ends support for Windows 7 | PCWorld

<!– –>


Let this be a lesson to keep your PC updated.

cloud security / data protection / encryption / security transition

Metamorworks / Getty Images

Today’s Best Tech Deals

Picked by PCWorld’s Editors

Top Deals On Great Products

Picked by Techconnect’s Editors

try {
threshold : 0, // You can set threshold on how close to the edge ad should come before it is loaded. Default is 0 (when it is visible).
forceLoad : false, // Ad is loaded even if not visible. Default is false.
onLoad : false, // Callback function on call ad loading
onComplete : false, // Callback function when load is loaded
timeout : 1500, // Timeout ad load
debug : false, // For debug use : draw colors border depends on load status
xray : false // For debug use : display a complete page view with ad placements
}) ;
catch (exception){
console.log(“error loading lazyload_ad ” + exception);

Security researcher Brian Krebs is warning that a particularly nasty bug may be patched on Tuesday, January 14—the day that support for Windows 7 is expected to expire.

If that’s true, then potentially millions of Windows users could be exposed to the malware, which Krebs is reporting could involve crypt32.dll, which controls “certificate and cryptographic messaging functions in the CryptoAPI.” Here’s what’s scary, Krebs reports: A flaw in the crypt32.dll could be used to spoof the digital signature of a piece of software, creating the possibility that your PC could allow in a piece of malware posing as a perfectly legitimate application.

Krebs is also noting that Will Dormann, who authors many of the vulnerability reports for the CERT Coordination Center, tweeted that “people should perhaps pay very close attention to installing tomorrow’s Microsoft Patch Tuesday Updates in a timely manner.”

Krebs is also reporting that the NSA is scheduled to host a conference call on January 14 regarding a current cybersecurity issue.

With support for Windows 7 set to expire tomorrow, the timing of this is extremely concerning. If Microsoft hews to its previous guidance, that means that it would not provide a security patch for the vulnerability, leaving millions of Windows 7 users especially vulnerable. Of course, even if Microsoft does issue a patch for this rumored flaw—and if there is one, extending support by a day wouldn’t be out of the question—that doesn’t mean there’s not another blockbuster bug waiting in the wings.

To reiterate: It’s highly unlikely that Microsoft wouldn’t issue a patch for Windows 7 if such a major vulnerability were disclosed. Nevertheless, Microsoft couldn’t come up with a more perfect reason to encourage users to migrate off an older, less secure OS—even if both Windows 10 and Windows 7 are vulnerable. 

Whether or not Microsoft or the NSA plans to release a bombshell tomorrow, one thing is true: You simply can not go wrong keeping your PC up to date with patches and other fixes. 

Note: When you purchase something after clicking links in our articles, we may earn a small commission. Read our
affiliate link policy for more details.

Leave a Reply

Your email address will not be published. Required fields are marked *