Bonum Certa Men Certa

Microsoft's Negligence in Patching (Worst Amongst All Companies) to Blame for Stuxnet

Caught in nets



Summary: Stuxnet caused by flaws without patches to address them and some are still unresolved

BASED on a very recent report, Microsoft is worst at patching and Stuxnet is an issue we covered in [1, 2, 3, 4, 5, 6, 7]. Many large companies may be affected and lives are at stake. According to this, "Stuxnet attackers used 4 Windows zero-day exploits":



The attackers behind the recent Stuxnet worm attack used four different zero-day security vulnerabilities to burrow into — and spread around — Microsoft’s Windows operating system, according to a startling disclosure from the world’s largest software maker.

Two of the four vulnerabilities are still unpatched.


Well, tell that to Microsoft. It loves blaming the victims for being negligent. It never blames itself for that [1, 2, 3], even when it's clearly its own fault, e.g. with Internet Explorer [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12]. Two days ago we wrote about ASP.NET holes and reports about it have not stopped yet. Yesterday was Microsoft's Patch Tuesday which Microsoft says addresses 13 vulnerabilities (although Microsoft hides more, so it's probably over 13). One new article from Consumer Affairs has just made the claim that GNU/Linux is inherently more secure:

But improvements in the Windows operating system – and Apple and Linux's long-standing built-in defenses – have some wondering if consumers still need to add an anti-virus program to their computers. The answer differs, depending on who you talk to.

[...]

Linux-based systems, however, tend to have a much higher level of built-in security, as most Web servers run on Linux.


Vista 7 has improved virtually nothing in terms of security and Microsoft lacks a plan for changing the high risk to Windows users. The least it could do is patch known flaws, but the company does not even do that.

Recent Techrights' Posts

GNOME Foundation is in Reliable Hands (Executive Director)
Growing some good in one's garden
'Confidential Computing'? More Like a Giant Back Door.
CacheWarp AMD CPU Attack Grants Root Access in Linux VMs
 
Links 03/12/2023: New 'Hey Hi' (AI) Vapouware and Palantir/NHS Collusion to Spy on Patients Comes Under Legal Challenge
Links for the day
IRC Proceedings: Saturday, December 02, 2023
IRC logs for Saturday, December 02, 2023
Links 03/12/2023: CRISPR as Patented Minefield, Lots of Greenwashing Abound
Links for the day
Over at Tux Machines...
GNU/Linux news
Professor Eben Moglen: In 1991 Richard Stallman Thought GNU/Linux Was Doomed Due to Software Patents
Back when Linus Torvalds was about to release Linux Prof. Moglen and Dr. Stallman had already spent years developing GNU and refining its licence, the GPL, which Linux would later adopt
Montana’s TikTok Ban Was to Protect Free Speech and the United States' First Amendment
TikTok does not embrace Free speech
GNU/Linux Surges to Almost 4% Worldwide on Desktops/Laptops, 2% in Latest Steam Survey (Ubuntu Not the Top Distro)
We've fortunately bet on a winning platform
Links 02/12/2023: ChatGPT Drowns in Bad Press, Censorship Worldwide Increases Some More
Links for the day
Cybercrimes and Online Abuse From Extremists and Militants on a VPN/Tor
A straitjacket or lobotomy won't solve this issue
Links 02/12/2023: Pfizer Sued for Lies About Efficacy, Censorship of Scientific Dissent, More Pfizer Layoffs
Links for the day
Selling Free Software
by Richard Stallman
[Meme] Screenshots of Web Pages (Relevant to One's Article) Are Not Copyright Infringing Anywhere in the World
bullying and hate crimes
IRC Proceedings: Friday, December 01, 2023
IRC logs for Friday, December 01, 2023
A Year of Doing Techrights 'Full Time'
been a year!
Microsoft and Its Boosters Worsen Linux Security
The circus goes on and on
Links 01/12/2023: Facebook Infested With Malicious Campaigns by Imposters, ACLU Gives Advice on Doxxing and Online Harassment
Links for the day
Just Like Its Budget Allocation, the Linux Foundation Devotes About 3% Of Its Latest Newsletter to Linux, Devotes More to Linux's Rivals
It's just exploiting the brand
Links 01/12/2023: Google Invokes Antitrust Against Microsoft
Links for the day
Over at Tux Machines...
GNU/Linux news
UK Government Allowing Microsoft to Take Over Activision Blizzard Will Destroy Jobs
Over 30,000 fired this year? More?
It's Cheaper to Pay Bribes (and Produce Press Releases) Than to Pay Fines (After Lots of Negative Publicity)
Does the UK still have real sovereignty or do corporations from overseas purchase decisions and outcomes?
November 2023 Over With GNU/Linux at All-Time Highs According to statCounter
ChromeOS+GNU/Linux combined are about 7% of the "market"
New Report Provides Numerical Evidence That Google Hired Too Many People From Microsoft (and Became Malicious, Evil, Sociopathic)
"Some 12,018 former Microsoft employees currently work for the search and data giant"
Google: Keep Out, Don't Save Your Files, and Also Let Us Spy on Everything You Do
Do you still trust "clown" storage?
IRC Proceedings: Thursday, November 30, 2023
IRC logs for Thursday, November 30, 2023
Links 01/12/2023: Many Suppressions in Hong Kong and Attempts to Legitimise Illegal and Unconstitutional Fake Patent 'Court' in EU (UPC)
Links for the day