Governance
Does Microsoft patches Windows flaw too late for security?
Microsoft patched a escalation in Windows, exploited by North Korean hackers to gain unauthorised access, deployed malware.
Headline
Microsoft patched a escalation in Windows, exploited by North Korean hackers to gain unauthorised access, deployed malware.
Context
OUR TAKE Special feature for quick acquisition and repair work. Before the correction was made, the information was taken into account and the criminal elements were forced to take advantage of the sexual conduct of the criminal element. Collaboration between security researchers and security researchers at Security and Security Technology Co., Ltd. is very important in the future. –Lily,Yang, BTW reporter Microsoft recently addressed a serious privilege escalation vulnerability in Windows , tracked as CVE-2024-38193, during its latest Patch Tuesday update. This bug affects the Windows Ancillary Function Driver for WinSock and has a severity score of 7.8, allowing attackers to gain system privileges on affected endpoints.
Evidence
Pending intelligence enrichment.
Analysis
However, security experts from Gen Digital , which owns Norton and Avast , noted that the flaw was already being exploited by the Lazarus Group, a notorious North Korean hacking organisation. They used this vulnerability to deploy a malware rootkit called FudModule, potentially compromising sensitive system areas. The attack is particularly alarming as it targets professionals in high-stakes industries like cryptocurrency and aerospace. Historical attacks linked to Lazarus have led to significant financial losses, including a notable $600 million cryptocurrency theft, raising questions about the broader implications and funding of North Korea’s operations. Also read: Microsoft blames Delta Air Lines for prolonged global cyber outage Also read: North Korean hackers funnel $150,000 of stolen crypto to Asian firm
Key Points
- Microsoft has patched a critical privilege escalation vulnerability in Windows, exploited by North Korean hackers to gain unauthorised access.
- Researchers warn that the patch may be ineffective as the exploit was already being actively used by the Lazarus Group to deploy malware.
Actions
Pending intelligence enrichment.
