Barney's Blog

Blog archive

Hacker Shortcut Blocked

A new exploit, the so-called shortcut flaw, is closed as of today -- so long as you download the patch.

Here what this flaw is all about: Hackers use the Windows Shell to distribute nasty code that exploits Windows desktop shortcuts. The biggest problem? One need not to click the shortcut for the malicious code to activate.

Microsoft only releases out-of-band, or non-Patch Tuesday patches in the direst of circumstances, so I'm guessing this is a pretty big deal, especially as Microsoft deems the flaw as ‘critical.' Microsoft noted that it also affects XP SP2, but these users won't be getting a patch; Microsoft ended patch support for XP SP2 on July 13.

Posted by Doug Barney on August 02, 2010


Featured

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.

  • World Map Image

    Microsoft Taps Nebius in $17B AI Infrastructure Deal To Alleviate Cloud Strain

    Microsoft has signed a five-year, $17.4 billion agreement with Amsterdam-based Nebius Group to expand its AI computing capabilities through third-party GPU infrastructure.

  • Microsoft Brings Copilot AI Into Viva Engage

    Microsoft 365 Copilot in Viva Engage is now generally available, extending Copilot's AI-powered assistant capabilities deeper into the Viva platform.