Menu
Rumours mount that a major bug could be disclosed on the day Microsoft ends support for Windows 7

Rumours mount that a major bug could be disclosed on the day Microsoft ends support for Windows 7

Let this be a lesson to keep your PC updated

Credit: IDG / Microsoft

Security researcher Brian Krebs is warning that a particularly nasty bug may be patched on Tuesday, January 14—the day that support for Windows 7 is expected to expire.

If that’s true, then potentially millions of Windows users could be exposed to the malware, which Krebs is reporting could involve crypt32.dll, which controls “certificate and cryptographic messaging functions in the CryptoAPI.”

Here’s what’s scary, Krebs reports: A flaw in the crypt32.dll could be used to spoof the digital signature of a piece of software, creating the possibility that your PC could allow in a piece of malware posing as a perfectly legitimate application.

Krebs is also noting that Will Dormann, who authors many of the vulnerability reports for the CERT Coordination Center, tweeted that “people should perhaps pay very close attention to installing tomorrow’s Microsoft Patch Tuesday Updates in a timely manner.”

Krebs is also reporting that the NSA is scheduled to host a conference call on January 14 regarding a current cyber security issue.

With support for Windows 7 set to expire tomorrow, the timing of this is extremely concerning. If Microsoft hews to its previous guidance, that means that it would not provide a security patch for the vulnerability, leaving millions of Windows 7 users especially vulnerable.

Of course, even if Microsoft does issue a patch for this rumoured flaw—and if there is one, extending support by a day wouldn’t be out of the question—that doesn’t mean there’s not another blockbuster bug waiting in the wings.

To reiterate: It’s highly unlikely that Microsoft wouldn’t issue a patch for Windows 7 if such a major vulnerability were disclosed. Nevertheless, Microsoft couldn’t come up with a more perfect reason to encourage users to migrate off an older, less secure OS—even if both Windows 10 and Windows 7 are vulnerable.

Whether or not Microsoft or the NSA plans to release a bombshell tomorrow, one thing is true: You simply can not go wrong keeping your PC up to date with patches and other fixes.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Windows 7

Featured

Slideshows

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

This exclusive Reseller News Exchange event in Auckland explored the challenges facing the partner community on the cloud security frontier, as well as market trends, customer priorities and how the channel can capitalise on the opportunities available. In association with Arrow, Bitdefender, Exclusive Networks, Fortinet and Palo Alto Networks. Photos by Gino Demeer.

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security
Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomed 2019 inductees - Leanne Buer, Ross Jenkins and Terry Dunn - to the fourth running of the Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed the changing face of the IT channel ecosystem in New Zealand and what it means to be a Reseller News Hall of Fame inductee. Photos by Gino Demeer.

Reseller News welcomes industry figures at 2020 Hall of Fame lunch
Show Comments