Rumor: Microsoft might share information on 'extremely critical vulnerability' later today

Could it have something to do with Windows 7 ?

now its officially EOL, maybe they'll admit there's a huge gaping hole, that they won't be closing, or can't close.....

 

Also because if is really 20 years old hole... They do not want to be responsible for open doors in a still large population of computers.

 

@Will Dormann
I get the impression that MS developers should pay closer attention to how they implement security. I don't know... just call it the bare minimum?

 

Can't close?? It's a single DLL file. All you would have to do is copy over the newer patched file version surely? (Unless the OS won't allow computer admin to overwrite that file)

 

As long as they fix it

 

Yeah as long as they fix it without breaking something else

 

Yup

 

I hope this is true, but I am not so certain. MS has been very vocal the past few weeks about the continued support / patches only being made available to businesses and 365 subscribers who are licensed for the extended support

 

Any idea when the patches for Patch Tuesday are supposed to drop? For me this Tuesday is already 2/3's over!

 

Here in the UK, its 6pm.

 

Though Microsoft has shown they can patch if they deem it critical enough. Even though XP was dead, they did release an update against the Wannacry vulnerability, as well as the Remote Desktop vulnerability this year.

 

It would not do any good for Microsoft not to release extremely significant security patches for Win7 even a while after the supporting ending deadline. MS itself relies on the web a lot, so botnets are their enemy as well. Not to mention it'd bad for their PR if this became a real plague due to not patching it. If news sites report there's a hundred thousand PC Win7 botnet that MS could have prevented with a simple patch, yet refused to, what would people think? Well, Linux people would snicker.

 

Cryptography...hmmm...
I will leave my wife's computer without patch - maybe someone will steal the parts of her identity that annoy me...

 

"According to Krebs On Security, Microsoft is about to release an extremely critical vulnerability in Windows."

I seriously doubt that is really what they are going to release.

 

Well they do want people to use the newest build so maybe that'd do it...


What will they fix though the ease of which one bypasses the activation requirements?
(Well it's probably quite important but I guess we'll get some details in a hour or so when the update is actually out.)

EDIT: Sides they've been handing out free system upgrades for users on W7 way after the initial time period for that was out so yeah it's probably something quite important then.


Now what is it and what will it do to overall system performance.
(Eh it's probably not too bad in that regard.)

Hmm wonder if that means the current 19500 build is already using that fix, 19000 20H1 hasn't been updated since December and might be vulnerable still.

Guess a .xxx update for current 19000 build would also confirm it's kinda probably going to be the RTM build instead of issuing a full new build.
And whatever else for 19H2 and earlier this cumulative will fix up.

 

and were patched!

 

whole bunch of new stuff just came down the pipe