Homeland Security on Windows Patch a warning to Microsoft

Stan Beer
Friday, 11 August 2006 09:55

Opinion and Analysis

The involvement of the US Department of Homeland Security with regard to a newly announced critical vulnerability in Microsoft Windows is a wake up call. The serious nature of cyber attacks on the operating system sitting on most of the world's desktops has reached the level where it is now a matter of national and international concern.

For Microsoft, having a government security agency taking a high profile interest in a serious vulnerability in Windows must be a concern of the highest order.

The flaw outlined in Microsoft's MS06-040 security bulletin is apparently so serious that all Windows versions are affected and users can be hacked just by having their computers switched on and connected to the internet.

Security specialists, including Homeland Security's Computer Emergency Readiness Team (US-CERT), are saying its not a matter of if but when a major attack happens. And when the attack does occur, it could affect government, corporate and private computers around the world.

Exploits for the vulnerability have already been publicly demonstrated that can initiate a denial of service attack and experts are warning that a major worm could well be on the way.

For many users, who pay diligent attention to their patch Tuesday security updates, the expected exploits will be no problem. However, for the myriad of pirate Windows users and users who may only turn on their computers sporadically, a vulnerability of this nature could prove disastrous as exploits, including possible worms, are expected to be just days away.

Obviously, the Department of Homeland Security is concerned enough by the ramifications of having sources of exploits with malicious intent gaining remote access to large numbers of US computer systems to issue a public warning for users to patch their systems immediately.

The Homeland Security alert should also serve as yet another warning to Microsoft to get its security house in order. Hopefully, such gaping holes in the software company's operating system will no longer be discovered with the release of Vista.