Barney's Blog

Blog archive

Hacker Shortcut Blocked

A new exploit, the so-called shortcut flaw, is closed as of today -- so long as you download the patch.

Here what this flaw is all about: Hackers use the Windows Shell to distribute nasty code that exploits Windows desktop shortcuts. The biggest problem? One need not to click the shortcut for the malicious code to activate.

Microsoft only releases out-of-band, or non-Patch Tuesday patches in the direst of circumstances, so I'm guessing this is a pretty big deal, especially as Microsoft deems the flaw as ‘critical.' Microsoft noted that it also affects XP SP2, but these users won't be getting a patch; Microsoft ended patch support for XP SP2 on July 13.

Posted by Doug Barney on August 02, 2010


Featured

  • Image of a futuristic maze

    The 2024 Microsoft Product Roadmap

    Everything Microsoft partners and IT pros need to know about major Microsoft product milestones this year.

  • Close Up Dollar Bill Graphic

    Price Increases Coming to Power BI, Microsoft Teams Phone

    Microsoft is preparing to implement the first price increases for two standalone products: Power BI and Microsoft Teams Phone.

  • Dynamics 365 Getting Data Security Boost from Druva

    Druva is working to extend its SaaS-based data security platform to support Microsoft's Dynamics 365 Sales and Dynamics 365 Customer Service products.

  • Microsoft Offers Monthly Billing for Annual Cloud Subscriptions

    Microsoft described a new monthly billing option for customers that have signed annual contracts for services like Microsoft 365, Windows 365, Power Platform and others.