Bonum Certa Men Certa

Eye on Security: 'F1' Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Windows XP is sad



Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest



● Microsoft Targets Media Flaws In April Patches

● Another big Microsoft Patch Tuesday coming

● Big Patch Tuesday On Way

● Microsoft Schedules Major Patch Tuesday

It's likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow's Patch Tuesday activities. The company's supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.


● Microsoft to fix F1 bug

Microsoft plans to fix the 'F1' security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.


XP Neglect



● MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft's latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.


● Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

● Microsoft Will Not Patch Newest XP Virus

● Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect



● Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.


● Windows Vista SP1 needed for support to continue

● Microsoft Ends Original Vista Support

● Microsoft ends support for original Windows Vista

● Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

● Microsoft to end support for earlier Windows versions

● End of the road for Windows Vista RTM

● Microsoft To Stop Supporting Windows Vista RTM

● No more support for Microsoft Windows Vista - so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin



● Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can't be exploited.

Of the 11 security bulletins that will be released in a few hours, "Bulletin 7" will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.


Worth seeing:



Zeus (Windows Spyware/Botnet)



● Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines 'phone home' to hacker controlled servers in China.


● Zeus botnet exploits unpatched PDF flaw

● Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as ".rar," and ".zip," said Tomislav Pericin, founder of the commercial software protection project RLPack.


New Malware



● Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim's computer including domain, OS version, file use history and IE favourites.


● Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.


Conficker



China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China's National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.


Recent Techrights' Posts

Contemptuous Law Firm Accusing Others of Contempt of Court
Keeping a running tally can help
Links 10/10/2026: Let's Encrypt Making Changes (Problem for Small Sites/Operations), Quartz is Officially a Slopfarm (Busted)
Links for the day
Brigading Against Women - Part XXV - No Anonymity for People Who Did Illegal Things
"Empathy is the sunlight to the vampire of culture."
 
Anderon Is Not a Real Company, It's an IBM Bailout Dressed Up or Wrapped Up In Buzzwords
It certainly does seem like they receive money from taxpayers for nothing, or for IBM to do mass layoffs/closure at Albany under the guise of "making a new spinoff"...
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, October 10, 2026
IRC logs for Saturday, October 10, 2026
Gemini Links 10/10/2026: Radio Romania International, Avoiding GAFAM, Open Camera, and Another Palm
Links for the day
The 2026 Slop Prediction (Slopfarms Perishing)
Morality in the "digital world" has deteriorated profoundly
netsplit.de (Survey of IRC Networks and History) Only Partly Functional This Month
Get well soon, netsplit.de
Microsoft Cuts
GAFAM enshittification
NVIDIA Acts Like It Cannot Pay Salaries (Too Many Obligations, Sales in Circular Financing, or Basically Accounting Fraud)
Masters of acting as clients of themselves
Paying for elections, Reform UK illegal confession in High Court
Reprinted with permission from Daniel Pocock
Microsoft Abuses PERM and Lays Off Workers in India
The US government has made it easier for Microsoft to hide the mass layoffs
The GAFAM Elections in the United States
If the election is run by platforms that have back doors "baked-in" and if the communications are overseen by GAFAM, you would not have to be a "nutty MAGAt" to dispute the outcome
More GAFAM Layoffs (Late on Friday Night)
They say they are worth trillions, but they don't even make money
Male-Dominated EPO Fails to Have "Concrete Measures to Support Female Staff"
Being a female at the EPO is exceptionally hard
Production Freeze at the European Patent Office (Opposing Monarchy, Institutional Maladministration and Corruption)
Eight reasons to participate
Links 10/10/2026: Microsoft 'Open' 'AI' Silencing Critics, "Data Centres are the New Front Line in the Russia-Ukraine War"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 09, 2026
IRC logs for Friday, October 09, 2026
Gemini Links 10/10/2026: Optimism, Stargazing, "Life Without Smartphone", and Fairphone 4
Links for the day
Links 09/10/2026: Stranded Busan Shark Still a 'Circus', Endangered Monkey Rescued, BBC Shells Out Money
Links for the day
Gemini Links 09/10/2026: Manifesto, Slop, Geminispace, and "Cryptography of the Internet"
Links for the day
Betanews is Still a Slopfarm, Articles About "Linux" Are Fake and Plagiarism by LLMs
Cheaters and plagiarists aren't journalists; they're people who rip off and harm journalists
The Register MS Sponsored to Hype Up "Datacenters" and "AI" (Bubble, Pyramid Scheme)
"Sponsored by Cisco" with "AI" 26 times in this page
James Bottomley Has Promoted Microsoft-Controlled Restricted ('Secure') Boot, His Blog Has Just Been Cracked
Does this meet IBM's and Microsoft's standards for "distinguished" (in security)?
Links 09/10/2026: "Internet Archive to Demo Wayback Machine at Friday’s Uniqlo Street Festival", France Wages Censorship War via DNS
Links for the day
Controlled Opposition
The underlying concept is hardly new
More Stallmans
We need more Stallmans, we don't need to change Stallman
SUEPO Munich (EPO Staff Union in the Main Headquarters) Opposes Monarchy ('Cocaine King' Campinos), Plans Online Meeting Next Week
They may have about 1,000 workers joining in
World Mental Health Day is Tomorrow and EPO Staff Talks About What the Job Does to Workers
In recent years we've written a great deal about mental health consideration in relation to work, with a focus on "IT"
GNU/Linux Flirts With 20% "Market Share" in North America Overnight
Who should we trust on GNU/Linux? Microsofters on an armchair or Cloudflare Radar?
You Definitely Do NOT Wish to Live Close to a Datacentre
put aside for a moment the noise, the pollution...
New Site Makes the Case Against Adoption of Omarchy, But Focuses Almost Entirely on Politics
Let's examine what the page says and what points it focuses on
Brigading Against Women - Part XXIV - Nobody's Name is Unspeakable
Names are not sacred
Microsoft is in Trouble (With the Regime It Sponsored)
It seems like Microsoft paying the existing regime/dictatorship wasn't enough
GGG Pot Calls the Kettle Black
"It means a situation in which somebody accuses someone else of a fault which the accuser shares, and therefore is an example of psychological projection, or hypocrisy. Use of the expression to discredit or deflect a claim of wrongdoing by attacking the originator of the claim for their own similar behaviour (rather than acknowledging the guilt of both) is the tu quoque logical fallacy."
In the United Kingdom, Rising Cost of Hardware Benefits GNU/Linux
GNU/Linux rose from about 4% to almost 6% in one year
Japanese Targets of Cyber Breaches or Insider Threats
Japanese government bureau and major firms experience data breaches
Gemini Links 09/10/2026: Optimism, Stargazing, and Solar MiniServer
Links for the day
The Microsoft Ban Should Go Further (Telecommunications Cybersecurity and Resilience Act Incompatible With Back Doors)
it's not difficult to see where to start
When Americans Export a 'Suicide Mission' to Other Continents
I worry that this culture of debt-taking and overconsumption is being spread from the US to Europe
The Register MS: "AI" Several Times in Same Headline, 31 Times in Page. The Register MS Was Paid to Do This.
The phenomenon is commercial (paid media), not scientific
The Outcome of Microsoft Ban Was Predictable
told you so
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 08, 2026
IRC logs for Thursday, October 08, 2026