Google clashes with Microsoft over Windows flaw disclosure (actively exploited zero-day vuln)

PC World ^ | Oct 31, 2016 | Michael Kan

[TChad]

From http://venturebeat.com/2016/10/31/google-discloses-actively-exploited-windows-vulnerability-just-10-days-after-reporting-it-to-microsoft/:

Update at 12:45 p.m. Pacific: Microsoft issued a statement, though the company did not share when a patch could be expected.

“We believe in coordinated vulnerability disclosure, and today’s disclosure by Google puts customers at potential risk,” a Microsoft spokesperson told VentureBeat. “Windows is the only platform with a customer commitment to investigate reported security issues and proactively update impacted devices as soon as possible. We recommend customers use Windows 10 and the Microsoft Edge browser for the best protection.”

A source close to the company also shared that the exploit Google describes requires the Adobe Flash vulnerability. Since Flash has been patched, the Windows vulnerability is mitigated. That said, Microsoft still needs to plug the security hole as it could be leveraged in other types of attacks.

I added the bold.

[rarestia]

You do understand that the government publishes vulnerability lists for ALL operating environments, right? Microsoft is NOT the only game in town. They’re the biggest, but they’re not the only one being tested. Apple and Android are regularly compromised and patched.

[MarchonDC09122009]

Of course.
The CERT list I sent contains bulletins pertaining to all software vulnerabilities.

The thread post was about Microsoft delaying addressing a serious vulnerability in a responsible manner, and hence discussion was directed accordingly.

All OS’s have vulnerabilities discovered on a regular basis.
Even Unix, ie: Redhat, AIX, Suse, etc.

Thx

[dayglored]

> A source close to the company also shared that the exploit Google describes requires the Adobe Flash vulnerability. Since Flash has been patched, the Windows vulnerability is mitigated.

Handy to know... thanks!

[jetson]

bing

[AdmSmith]

Microsoft: Russian hackers are exploiting Windows flaw exposed by Google

The hacking group is one that has been linked to the Russian government, and is thought to have been behind a number of recent US hacks. Tensions are already running high between the US and Russia — particularly in light of American accusations that Russia has engaged in a hacking campaign designed to interfere with the election.

http://betanews.com/2016/11/02/russian-hackers-exploit-windows-security-flaw/