Bonum Certa Men Certa

Eye on Security: 'F1' Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Windows XP is sad



Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest



● Microsoft Targets Media Flaws In April Patches

● Another big Microsoft Patch Tuesday coming

● Big Patch Tuesday On Way

● Microsoft Schedules Major Patch Tuesday

It's likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow's Patch Tuesday activities. The company's supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.


● Microsoft to fix F1 bug

Microsoft plans to fix the 'F1' security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.


XP Neglect



● MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft's latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.


● Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

● Microsoft Will Not Patch Newest XP Virus

● Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect



● Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.


● Windows Vista SP1 needed for support to continue

● Microsoft Ends Original Vista Support

● Microsoft ends support for original Windows Vista

● Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

● Microsoft to end support for earlier Windows versions

● End of the road for Windows Vista RTM

● Microsoft To Stop Supporting Windows Vista RTM

● No more support for Microsoft Windows Vista - so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin



● Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can't be exploited.

Of the 11 security bulletins that will be released in a few hours, "Bulletin 7" will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.


Worth seeing:



Zeus (Windows Spyware/Botnet)



● Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines 'phone home' to hacker controlled servers in China.


● Zeus botnet exploits unpatched PDF flaw

● Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as ".rar," and ".zip," said Tomislav Pericin, founder of the commercial software protection project RLPack.


New Malware



● Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim's computer including domain, OS version, file use history and IE favourites.


● Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.


Conficker



China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China's National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.


Recent Techrights' Posts

IRC's Growing Popularity in 2026
No company controls or profits from IRC, it is in the Commons
Amazon's Debt Skyrockets by Almost 100 Billion Dollars in 9 Months
On top of that there is additional (secret, kept stealth by accounting tricks) debt
Many People "Left" Red Hat This Month, Including Yesterday
We already saw this with SUSE
Birss Replaces Vos in UK's High Court, LLM Slop Plagiarism a Contentious Issue
Only days ago we mentioned Sir Geoffrey Vos in relation to lobbying for LLM slop
 
Can't Trust Big Banks, Let's Try 'Bros' Instead?
But let's blame "North Korea"
"AI" as Surrogate for Debt and Distraction From Computing (Bots Described as "Agents" and/or Any Form of "Intelligence" is More Like a Religion)
We're letting people without even college degrees game the "market" (Wall Street) by lying to it
Intercontinental Brigading - Part XXV - Election Integrity at a Time of Back Doors and Very Severe Bugs in UEFI
How dare British media comment on insurrection following a US election?
"The Judge Accepted That Mrs Schestowitz Had Been the Subject of a Vicious Campaign of Online Harassment"
That's consistent with how they men treat women
Gemini Links 31/10/2026: Hallowe'en and "Thinking About People"
Links for the day
Links 31/10/2026: The Hinge on Apple's Constantly Breaking New Foldable iPhone Was "Built With Slop", Slop Causes Cash Squeeze GAFAM
Links for the day
Google Illegally Destroyed a Quarter Million Trees Without a Permit for a Hypothetical Project That Might be Cancelled, Debt Has Soared by 30 Billion Dollars in 3 Months ($10 Billions Borrowed Per Month)
Google is bleeding from slop
Slavery at Microsoft
illegal if true
Gemini Links 31/10/2026: "Where I Draw the Line With" Slop Plagiarism and "Nobody Cares That You're Leaving Proton" (Over Slop)
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 30, 2026
IRC logs for Friday, October 30, 2026
Links 30/10/2026: "Over 41,000 DHS Employee Records Leaked Online" and Concerns Over Radicalism in France
Links for the day
Intercontinental Brigading - Part XXIV - It's an Inherently American Issue and American Elections Are at Risk From Restricted ('Secure') Boot and LLM Chatbots (Disinformation at Scale)
We'll focus a lot on US elections in the coming days
"Early Retirement" (Silent Layoffs) for Everybody Except the Executives
Some will stick around even past 70
Despite the Mass Layoffs Microsoft's Debt Soared by 5.1 Billion Dollars in Just 3 Months
This is why Microsoft asks 60,000 workers to leave
Gemini Links 30/10/2026: Solar MiniBBS, Kubernetes With FreeBSD, "Sysadmin Day"
Links for the day
Microsoft Layoffs Far Worse Than the Media Tells (Microsoft Spin Laundered as "Reporting")
Some people are made to "retire" and sign an NDA to make it seem like a happy ending and mostly consensual retreat
Links 30/10/2026: Google Crashes on Slop Disappointment and GAFAM's "Data Center Blitz Is Burning Through Cash and Scaring Wall St."
Links for the day
Fake 'Articles' in The Register MS Concerning "AI"
We don't suppose The Register MS will be around for much longer after this bubble pops
What Linus Torvalds Told Me Two Decades Ago
It seems like he was eager to distinguish himself from the "elders" of FSF [...] For anything "revolutionary" to happen in the sciences one must accept the risk of living in poverty like Tesla (the person, not the right-wing fanatics) and Torvalds isn't too old to "cause a stir"
GNU/Linux as a Free Software Platform is More GNU (and GPL) Than Linux
GNU predates Linux by nearly a decades and it was born to tackle injustices
Who Or What Are Security Professionals/Experts?
Companies like GAFAM are willing to tolerate cheaters because those companies themselves are cheats
Intercontinental Brigading - Part XXIII - What Garrett Did Puts Elections at Risk (Also in His Own Country, Where a Dictator Trusts Only Machines That 'Support' Him)
UEFI 'security' is only as trustworthy as its ferocious boosters
Gemini Links 30/10/2026: RIP Patrick Stewart and Amp Integration
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 29, 2026
IRC logs for Thursday, October 29, 2026
The Metric is Not the Mission
"Passing Thoughts" by Andy
More Than 5 Years Have Passed Since Official Release of Vista 11 and in the US It's Measured as Only 3 Times Bigger Than GNU/Linux on the Desktop/Laptop
If mobile is culled from the statistics, then GNU/Linux is somewhere near 11%
It's About Intention, Not Attrition, at Microsoft
Microsoft does in fact aim to push many workers off the cliff
The Next 50 Years of Emacs (and GNU)
GNU's founder made the widely used editor, GNU Emacs
Links 29/10/2026: Microsoft-Connected and Funded Openwashing at FOSDEM, Tragedy in Spain
Links for the day
Gemini Links 29/10/2026: London, Worcestershire, and Robot Exclusion Protocol
Links for the day
The Register MS is Publishing Spam About "AI" for HP, Sponsored by HP, Even Composed by HP
Or "HPE" as they choose to call themselves (with the hype of "enterprise")
Links 29/10/2026: Anthropic Still Sued Over Copyright Infringement (Plagiarism Isn't "Training"), Elon Musk Openly Admits He Helps Putin Crush Ukraine
Links for the day
Intercontinental Brigading - Part XXI - Techrights Was Right, So Why Was It Punished by Lawfare While the Culprits Walk Away Scot-free?
Techrights did a public service, cautioning about real risks to the public, but the people who caused the problems walk away scot-free
Intercontinental Brigading - Part XXII - Still "Radio Silence" From "Restricted Boot" Perpetrators (After Techrights Proven Right Again)
Maybe when they sober up they'll say something...
'Secure' Boot Is Not Secure, Here Are News Reports About the Latest Evidence
We'll be linking to this page in the future as evidence of the catastrophe
No, Microsoft Isn't Doing Well (It Has Struggled for a Long Time)
Microsoft isn't growing, the shares are a Ponzi scheme of sorts
What Makes Techrights a Community
Communities can accomplish a lot. They cannot be "bought" and "sold", they're based on trust, mutual respect, and shared ideology.
Linux Links 29/10/2026: Refractor Stargazing and Making Better Use of RAM in Linux
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 28, 2026
IRC logs for Wednesday, October 28, 2026