Microsoft admits zero-day security issue

Windows users have been warned by Microsoft regarding another zero-day problem, this time involving PPT files being sent through email. MS is trying to produce a patch to counter the issue.

All Windows versions, starting with  Server 2003, have been affected by the flaw.

A number of researchers have established that this particular zero-day concern is not dissimilar to one that was patched just a few ago, when eight updates were issued by MS.

While a patch is being created, MS produced a temporary Fixit tool able to block any attacks identified so far. Its support pages offer the tool for download.

Steve Armstrong, the director of technical security for penetration testing firm Logically Secure, said that although the Microsoft flaw creates a negative effect, those users who by default have User Account Control enabled are able to minimise any risks.

Armstrong said:

“Users should also not open PPT files from untrusted sources or trusted ones at unusual times – again that should be standard practice and this rule should be in effect 24/7.

“They should also implement the Enhanced Mitigation Experience Toolkit (EMET) 5.0, which is offered as a no-extra-cost security enhancement to Windows.”

Employees using Windows may need to be educated on the dangers of Microsoft’s latest flaw. A more preferable approach for businesses to take, however, would be to post cyber security jobs and hire staff who are capable of preventing systems from being infected. It may just save a lot of time and energy in the long run.