Researchers from Acros Security have uncovered a serious zero-day vulnerability affecting Windows users—from version 7 to 11, and even Windows Server 2008 R2. This flaw poses a significant risk as it allows attackers to obtain NTLM credentials simply by tricking users into viewing a malicious file in Windows Explorer.
The vulnerability has been reported to Microsoft, but currently, it lacks a Common Vulnerabilities and Exposures (CVE) designation, and no official patch is available. This situation makes it a precarious scenario, highlighting the urgent need for users to be cautious.
Mitja Kolsek, the founder of Acros Security, explained that merely opening a shared folder or a USB drive that contains the malicious file or browsing the downloads folder where such a file was downloaded can exploit the vulnerability.
In light of this significant risk, users are advised to take immediate protective measures. Fortunately, the free “micropatch” provided by the 0patch platform is available for all Windows versions affected, even those that are no longer supported. This micropatch serves as a temporary stopgap until Microsoft rolls out a formal fix.
It’s crucial for Windows users to remain vigilant and apply the necessary precautions to protect their systems from this threat while waiting for an official solution from Microsoft.
For further details on related security issues:
Hudson Valley Host is premier provider of cutting-edge hosting solutions, specializing in delivering a seamless online experience for businesses and individuals. We offer a comprehensive range of hosting services, including Shared Hosting, VPS, Dedicated Servers, and Colocation. With 24/7 technical support, robust security measures, and user-friendly control panels, we empower clients in managing their online presence effortlessly. Hudson Valley Host is your trusted partner in achieving online success.
For Inquiries or to receive a personalized quote, please reach out to us through our contact form here or email us at sales@hudsonvalleyhost.com.
