Bonum Certa Men Certa

Eye on Security: 'F1' Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Windows XP is sad



Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest



● Microsoft Targets Media Flaws In April Patches

● Another big Microsoft Patch Tuesday coming

● Big Patch Tuesday On Way

● Microsoft Schedules Major Patch Tuesday

It's likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow's Patch Tuesday activities. The company's supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.


● Microsoft to fix F1 bug

Microsoft plans to fix the 'F1' security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.


XP Neglect



● MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft's latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.


● Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

● Microsoft Will Not Patch Newest XP Virus

● Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect



● Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.


● Windows Vista SP1 needed for support to continue

● Microsoft Ends Original Vista Support

● Microsoft ends support for original Windows Vista

● Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

● Microsoft to end support for earlier Windows versions

● End of the road for Windows Vista RTM

● Microsoft To Stop Supporting Windows Vista RTM

● No more support for Microsoft Windows Vista - so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin



● Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can't be exploited.

Of the 11 security bulletins that will be released in a few hours, "Bulletin 7" will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.


Worth seeing:



Zeus (Windows Spyware/Botnet)



● Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines 'phone home' to hacker controlled servers in China.


● Zeus botnet exploits unpatched PDF flaw

● Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as ".rar," and ".zip," said Tomislav Pericin, founder of the commercial software protection project RLPack.


New Malware



● Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim's computer including domain, OS version, file use history and IE favourites.


● Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.


Conficker



China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China's National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.


Recent Techrights' Posts

Intercontinental Brigading - Part XXXXII - Running One's Mouth
British Police told me "making a false complaint to police is a crime" in relation to Lozza
The Register MS: Turnover Fell by Over a Million Pounds (About 20%) in One Year, Administrative Expenses Rose by Almost Half a Million Pounds, The Register MS Operates at a Loss
This is not a (commercially) healthy publisher
 
At The Register MS the Net Liabilities Doubled in One Year, Tangible Assets Down About 35% in One Year
signed off in 2026
Another 20 Years of Exposing Corruption
We'll focus on carrying on what we do
EPO Budget and Finance Committee (in Very Recent Meeting) Increases Bribes to People Who Vote on Campinos Reappointment ("Cooperation Activities")
Buying 'elections' to protect the cocaine-stained regime in Europe's second-largest institution
Links 07/11/2026: London's SLAPP Industry Now Targets Kirkenes (Northern Norway) at the Behest of Corrupt Thieves in Russia and Microsoft’s 'Buyout' Offer Crashes Microsoft Systems
Links for the day
Links 07/11/2026: "The Moon is Waning Crescent", Homeworlds, and "Can't Handle The AVIF!"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, November 06, 2026
IRC logs for Friday, November 06, 2026
IBM Compels Workers - Even at Red Hat - to Become "Retired-ish"
Who needs RAs (layoffs, which have been rebranded as "buyouts" like pink slips are generous "gifts") when workers can have their butts kicked every day and WARN Act reporting thresholds are never approached?
Links 06/11/2026: "XBox Is Closer Than Ever to Being Sold Off" and "BuzzFeed Stock in Free Fall"
Links for the day
Gemini Links 06/11/2026: Dao and Dreams
Links for the day
20 Years of Techrights
Celebrating 2 decades of abuses of power being watched (and looking back at key changes)
Linux (and Linus Torvalds) Sleepwalking Into a Binance-Level Catastrophe With Slop 'Code'
Someone should ask Linus Torvalds or his boss (Linux Foundation) if they deem slop, which nobody audits, trustworthy enough to add to every computer out there running the Linux kernel
Vitaly Orlov Weaponises Deep Pockets to Leverage High Court of Justice in London for Censorship and Punishment of Critics
reproduced in full for more exposure and to make censorship harder
Intercontinental Brigading - Part XXXXI - What I Told British Police About Lozza the Same Month Garrett Was Preparing His First Nastygram From 'Hired Guns' Brett Wilson LLP
Lozza and Garrett
Outsourcing at IBM
Cheapening of the workforce is hardly a new problem
Links 06/11/2026: Slop "Companies Race to Lock Down Oil Clients" and Salon Shuts Down
Links for the day
Our Third Decade
Our anniversary is tonight at midnight
Freedom Is Not Free of Charge, Freedom Can be Very Expensive
Being someone's "slave" is the "default" when no resistance exists
Intercontinental Brigading - Part XXXX - Swatting by Proxy
Using imbeciles who lie to cops and then dox cops (and already have arrest record and court documents wherein they admit being stoned in front of the cops)
Intel Craters at Taxpayers' Expense (Bailouts for Failing Companies Simple Don't Work)
GOP, which did this, has lost many seats
Mass Layoffs at IBM, Also Outsourcing to India
What IBM does to itself it is doing to other entities as well
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, November 05, 2026
IRC logs for Thursday, November 05, 2026
During Strikes and Industrial Actions Lots of EPO Staff Organised Yesterday and Will Do the Same Next Week
There really needs to be a genuine election, not a reappointment
Gemini Links 06/11/2026: Hadestown and "Where Has the Electronics Shop Gone?"
Links for the day
Links 05/11/2026: Rule of Law Vanishing in Turkey, Joshua Wong Still Martyred by Chinese Regime
Links for the day
Gemini Links 05/11/2026: Classical Music, Politics, and Seeed Studio
Links for the day
Like Almost Every Slopfarm, UbuntuBuzz Seems to Have Thrown in the Towel
Linuxsecurity and Linuxiac (to some extent Linuxjournal) are still going, but for how much longer?
EPO 'Midterm' Elections Should Oust the Dictator
Tentatively a failure to secure another (unprecedented) reappointment before Christmas
Secret IBM Layoffs and Increase in PIPs (Silent Layoffs)
The media is failing to do its job
Links 05/11/2026: "Voice is Underutilized" and How Data Centres Lost the Midterm Elections
Links for the day
Intercontinental Brigading - Part XXXIX - Crime Numbers Regarding GGG (Americans) and Why Those Still Matter
Time does not undo the actions
Intercontinental Brigading - Part XXXVIII - Telling the Police About the Defamatory Blog Where Posts Targeted My Wife and I (From Across the Atlantic Ocean)
Two years ago we spoke to cops a lot
The Register MS is Losing Money Again, Based on The Register MS
Selling out didn't pay off for very long
There Are No "Layoffs" Anymore, Layoffs Got Rebranded
We're entering bizarre times when layoffs are said to be "down" (according to the regime that suffered a 'bloodbath' in the election) because companies quit using the term "layoffs"
Gemini Links 05/11/2026: Rivers of London, Soul Cakes, STMicroelectronics, and Slop
Links for the day
The Register MS Has Just Published Fake Article With "AI" 84 Times in the Page Because It Was Paid to Do This!
Astounding number of mentions of "AI" (84 in total)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, November 04, 2026
IRC logs for Wednesday, November 04, 2026