Reading Time: 2 minutes
Among its monthly bulletins announced this week, Microsoft announced a fix for vulnerability so old that if it was a person it could vote and have a driver’s license. Interestingly, it is a very serious bug that could be exploited to take control of the user’s computer, yet there is no indication that it has ever been exploited.
The flaw was apparently introduced in Windows 95 and can be exploited remotely using VBScript introduced in IE 3.0. Researchers from IBM’s X-Force security research and development unit reported the bug last May.
Another critical bug dealt with this month is a remote code execution vulnerability in the Microsoft Secure Channel (Schannel) security technology that enables SSL/TLS for Windows. There have been no know exploitations of this bug, but flaws in SSL/TLS have been a particular concern this year because of the Heartbleed flaw revealed in April and the disclosure of POODLE last month.
SSL/TLS is essential to e-Commerce and other financial transactions because it provides secured, encrypted communication. Such flaws, under certain circumstances, could allow hackers to intercept and read communications between a client (browser) and a server.
The Heartbleed flaw impacts users of OpenSSL on Apache servers. It requires that you update your OpenSSL with the latest software patches, then revoke and reobtain your SSL certificates. To address the POODLE fault, disable SSL 3.0 on all servers and browsers.
Comodo antivirus for the desktop and the enterprise is the best solution for preventing such breaches and Comodo Securebox will actually allow you to operate business as usual on an infected computer.
SecureBox Video
[embedded content]
START FREE TRIAL GET YOUR INSTANT SECURITY SCORECARD FOR FREE
- SEO Powered Content & PR Distribution. Get Amplified Today.
- EVM Finance. Unified Interface for Decentralized Finance. Access Here.
- Quantum Media Group. IR/PR Amplified. Access Here.
- PlatoAiStream. Web3 Data Intelligence. Knowledge Amplified. Access Here.
- Source: https://blog.comodo.com/pc-security/7972/
- :has
- :is
- a
- actually
- address
- All
- allow
- an
- and
- announced
- antivirus
- Apache
- April
- AS
- BE
- because
- been
- BEST
- between
- Blog
- breaches
- browser
- browsers
- Bug
- business
- but
- CAN
- certain
- certificates
- Channel
- circumstances
- click
- client
- code
- COM
- Communication
- Communications
- computer
- Concern
- content
- control
- could
- critical
- Development
- disclosure
- download
- e-commerce
- embedded
- enables
- encrypted
- Enterprise
- essential
- Event
- EVER
- execution
- exploited
- Fix
- flaw
- flaws
- For
- Free
- from
- get
- hackers
- Have
- heartbleed
- http
- HTTPS
- if
- Impacts
- in
- indication
- instant
- Internet
- Internet Security
- introduced
- IT
- ITS
- jpg
- Know
- Last
- latest
- License
- max-width
- May..
- Microsoft
- Month
- monthly
- no
- of
- Old
- on
- openssl
- operate
- Other
- Park
- particular
- Patches
- person
- PHP
- plato
- Plato Data Intelligence
- PlatoData
- preventing
- provides
- Read
- remote
- Reported
- requires
- research
- research and development
- researchers
- Revealed
- scorecard
- secure
- Secured
- security
- send
- serious
- Servers
- So
- solution
- SSL
- such
- Take
- Technology
- that
- The
- then
- There.
- this
- this week
- this year
- time
- to
- under
- unit
- Update
- users
- using
- very
- Vote
- vulnerability
- was
- week
- will
- windows
- with
- year
- yet
- You
- Your
- youtube
- zephyrnet
![Breach Prevention with Zero Trust Security Architecture [New Checklist]](http://platoblockchain.com/wp-content/uploads/2024/03/breach-prevention-with-zero-trust-security-architecture-new-checklist-300x262.jpg "Breach Prevention with Zero Trust Security Architecture [New Checklist]")
