Microsoft generally takes security very seriously, and for the most part, if you keep your Windows and Server operating systems updated, you can generally depend on some base-level security and stability. Unfortunately, it was recently discovered that, for almost two years, a very critical defense mechanism within Windows wasn\u2019t being properly secured.<\/p>\n
<\/p>\n
Microsoft\u2019s Windows Update tool is supposed to automatically add vulnerable software drivers to a blocklist.<\/p>\n
Basically, a driver is a piece of software on your computer that controls hardware. While your computer is first being built and set up, it requires proper drivers for each individual piece of equipment on it. Like all software, a driver can have a vulnerability in it that allows bad actors to exploit it. This tends to give them some level of access to your PC, which allows them to cause trouble.<\/p>\n
Unfortunately, Microsoft\u2019s Windows Update tool hasn\u2019t been managing this block list, despite the fact that Microsoft has been adamant about it over the last few years. While you might be getting security updates and patches, this one particular line of defense hasn\u2019t been getting fortified, and it\u2019s been causing issues over the last few months for a lot of people.<\/p>\n
This allows bad actors to push any known vulnerable driver to the PC and then utilize those vulnerabilities to get whatever access they want.<\/p>\n
This isn\u2019t something new either. This type of exploit has been around for over a decade, but there has been a huge increase over the last few years, and broad scale attacks often target this type of vulnerability. <\/p>\n
Microsoft is scrambling to work on a fix and claims that something is coming in an upcoming Windows Update to address this.<\/p>\n
For many businesses, the best way to ensure that their PCs are safe involves preventing users from being able to install and configure things on their work devices. While it won\u2019t protect your organization from every vulnerability under the sun, it does offer a very solid baseline of protection. If a user can\u2019t install software on a device, there are fewer opportunities for vulnerabilities.<\/p>\n
We can help lock down your network to make it much easier to keep it secure, and our ongoing management and maintenance will keep every device on your network updated and as secure as possible.<\/p>\n
If you are concerned about your cybersecurity, give us a call at (215) 525-3223 today.<\/p>\n","protected":false},"excerpt":{"rendered":"
Microsoft generally takes security very seriously, and for the most part, if you keep your Windows and Server operating systems updated, you can generally depend on some base-level security and stability. Unfortunately, it was recently discovered that, for almost two years, a very critical defense mechanism within Windows wasn\u2019t being properly secured.<\/p>\n","protected":false},"author":4,"featured_media":5896,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50,61],"tags":[87,67,125],"class_list":["post-5899","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-security","tag-malware","tag-security","tag-windows"],"yoast_head":"\n