{"id":7552,"date":"2014-05-12T07:30:36","date_gmt":"2014-05-12T11:30:36","guid":{"rendered":"http:\/\/thundercloud.net\/infoave\/new\/?p=7552"},"modified":"2014-05-12T07:30:36","modified_gmt":"2014-05-12T11:30:36","slug":"hackers-will-use-patches-for-newer-windows-versions-to-exploit-windows-xp","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/hackers-will-use-patches-for-newer-windows-versions-to-exploit-windows-xp\/","title":{"rendered":"Hackers Will Use Patches For Newer Windows Versions to Exploit Windows XP"},"content":{"rendered":"
\n
\n

Hackers now crave patches, and Microsoft’s giving them just what they want<\/h1>\n

At least one of next Tuesday’s updates looks like an excellent candidate to hackers as they sniff for bugs in the now-retired Windows XP<\/h2>\n<\/blockquote>\n<\/header>\n
\n
\n
\n
\n
\n

Computerworld –<\/span>\u00a0Hackers will have at least one, perhaps as many as four, patches next week to investigate as they search for unfixed flaws in Windows XP, the 13-year-old operating system that Microsoft retired from support April 8.<\/p>\n

“Come Tuesday, Microsoft will be patching some vulnerabilities in Windows, and it is realistic to assume that at least one of these will also affect Windows XP,” said Kasper Lindgaard, director of research and security at Secunia, in an email Friday. “Generally speaking, newly discovered vulnerabilities in XP will be unpatchable for private users, and therefore we will see a rise in attacks.”<\/p>\n

On May 13, Microsoft’s regularly-scheduled monthly Patch Tuesday, the Redmond, Wash. company will issue\u00a0eight security updates<\/a>\u00a0for its software. But because it has stopped providing updates to owners of Windows XP PCs, those customers will not see any of the eight.<\/p>\n

Hackers looking for vulnerabilities in Windows XP will be using the patches to find vulnerabilities in XP, Microsoft and security experts have said. By conducting before- and after-patch code comparisons, attackers may be able to figure out where a vulnerability lies in Windows 7 — which\u00a0will<\/i>\u00a0be patched — then sniff around the same part of XP’s code until they discover the bug there. From that point, it will be relatively straight forward for them to craft an exploit and use it against unprotected XP PCs.<\/p>\n

“Patches to the other Windows operating systems will be reverse engineered by hackers, seeking to discover which vulnerabilities were fixed by Microsoft, and if applicable, modified to work against Windows XP,” Lindgaard said.<\/p>\n

He’s not the only one who believes hackers will leverage updates to find unpatched bugs in XP. So does Microsoft.<\/p>\n

“After April [2014], when we release monthly security updates for supported versions of Windows, attackers will try and reverse engineer them to identify any vulnerabilities that also exist in Windows XP,” said Dustin Childs, director of Microsoft’s Trustworthy Computing group,\u00a0last October<\/a>. “If they succeed, attackers will have the capability to develop exploit code to take advantage of them.”<\/p>\n<\/blockquote>\n

SOURCE: COMPUTERWORD<\/strong><\/a><\/span><\/h4>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"

Hackers now crave patches, and Microsoft’s giving them just what they want At least one of next Tuesday’s updates looks like an excellent candidate to hackers as they sniff for bugs in the now-retired Windows XP Computerworld –\u00a0Hackers will have at least one, perhaps as many as four, patches next week to investigate as they search for unfixed\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1426,10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7552"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=7552"}],"version-history":[{"count":1,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7552\/revisions"}],"predecessor-version":[{"id":7553,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/7552\/revisions\/7553"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=7552"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=7552"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=7552"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}