Windows PC Also Vulnerable To FREAK Attacks, Microsoft Warns

Not only mobile devices and Mac computers are vulnerable to the attacks of recently uncovered ‘Freak’ security vulnerability. Microsoft Corp warned customers on Thursday that hundred of millions of Windows PC are also susceptible to this cyber attack.

This is after nine security experts revealed on Tuesday that devices running Apple iOS, Mac OS and Google Inc. Android browser can be made vulnerable to attack by worldwide Internet encryption technology.

ms x dost

freak-ssl-tls-vulnerability

‘Freak’ which stands for Factoring RSA-EXPORT Keys could allow attacks on PCs that connect with Web servers configured to use encryption technology intentionally weakened to comply with U.S. government regulations banning exports of the strongest encryption.

The researchers said that if hackers were able to penetrate, they could spy on communications as well as infect PCs with malicious software.

Security experts believed the vulnerability was rather difficult to use because hackers would need to buy hours of computer time to crack the encryption before launching an attack. “I don’t think this is a terribly big issue, but only because you have to have many ducks in a row,” said Ivan Ristic, director of engineering for cybersecurity firm Qualys Inc.

This includes finding a vulnerable web server, breaking the key, finding a vulnerable PC or mobile device, then gaining access to a device.

In an effort to protect customers, Microsoft advised system administrators to employ a workaround to disable settings on Windows servers that allow use of the weaker encryption. The company is also investigating the threat and had not yet developed a security update that would automatically protect Windows PC users from it.

On the other hand, Apple affirmed that it had develope a software update to address the vulnerability, which would be pushe out to customers next week. While Google said it had also developed a patch, which it provided to partners that make and distribute Android devices.

(Source) 

Have anything to add about the story? Share it in the comments below.

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    This site uses Akismet to reduce spam. Learn how your comment data is processed.

    ManilaShaker is a tech media producing insightful and helpful content for our local and growing international audience. Our goal is to create a premier Philippine digital consumer electronics resource that provides the most objective reviews and comparisons globally.