Microsoft Releases a Windows Update to Fix ‘Follina’ Vulnerability Actively Exploited by Hackers

[Pelican Press 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

Releases a Windows Update to Fix ‘Follina’ Vulnerability Actively Exploited by Hackers

This is the hidden content, please

• Sign In
• or
• Sign Up

has finally released a Windows security fix for the vulnerability that has actively been exploited by hackers. The issue, which was named “Follina” by security researchers, was publicly disclosed last month, though it was initially reported to the Redmond company in April. It enables attackers to hack Windows PCs using a maliciously crafted

This is the hidden content, please

• Sign In
• or
• Sign Up

Word document. The security update is available for users on Windows 7 and later.

This is the hidden content, please

• Sign In
• or
• Sign Up

has urged users to install the update “as soon as possible” to restrict attackers from gaining access to their systems.

Windows users should install the update by going to the Settings. The update has also been released for systems that are configured to receive automatic updates,

This is the hidden content, please

• Sign In
• or
• Sign Up

said in an update to its

This is the hidden content, please

• Sign In
• or
• Sign Up

.

“

This is the hidden content, please

• Sign In
• or
• Sign Up

strongly recommends that customers install the updates to be fully protected from the vulnerability,” the company noted.

As reported last month, the security issue, which has been tracked as CVE-2022-30190, was disclosed on

This is the hidden content, please

• Sign In
• or
• Sign Up

by Tokyo-based cybersecurity researcher team Nao_sec. It initially appeared to be impacting

This is the hidden content, please

• Sign In
• or
• Sign Up

Office, though

This is the hidden content, please

• Sign In
• or
• Sign Up

acknowledged that the flaw was related to

This is the hidden content, please

• Sign In
• or
• Sign Up

Diagnostic Tool (MSDT) that comes preloaded on Windows operating system.

Attackers would be able to exploit the vulnerability by executing PowerShell commands and eventually gain control of the MSDT.

Shortly after it became public, the severe vulnerability was found to be exploited by China-based hackers by using malicious Word documents to Tibetan users. When the documents are accessed, the attackers would be able to leverage the exploit to gain MSDT access and run tasks including installation of certain programs or creation of new user accounts.

As

This is the hidden content, please

• Sign In
• or
• Sign Up

by Bleeping Computer, the latest update doesn’t restrict

This is the hidden content, please

• Sign In
• or
• Sign Up

Office from loading Windows URI handlers without user interactions. It, however, limits attackers to get the control of MSDT by executing PowerShell commands.

The security update is available to all users who have a system running Windows 7 or later. Windows 10 versions have received it as

This is the hidden content, please

• Sign In
• or
• Sign Up

, while the update is available as

This is the hidden content, please

• Sign In
• or
• Sign Up

on Windows 11 systems.

---

This week on Orbital, the Gadgets 360 podcast, we discuss the Surface Pro 8, Go 3, Duo 2, and Laptop Studio — as

This is the hidden content, please

• Sign In
• or
• Sign Up

sets a vision for Windows 11 hardware. Orbital is available on

This is the hidden content, please

• Sign In
• or
• Sign Up

,

This is the hidden content, please

• Sign In
• or
• Sign Up

,

This is the hidden content, please

• Sign In
• or
• Sign Up

,

This is the hidden content, please

• Sign In
• or
• Sign Up

,

This is the hidden content, please

• Sign In
• or
• Sign Up

,

This is the hidden content, please

• Sign In
• or
• Sign Up

and wherever you get your podcasts.

Affiliate links may be automatically generated – see our ethics statement for details.

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

windows 10 11 update follina vulnerability exploit patch security fix windows update,

This is the hidden content, please

• Sign In
• or
• Sign Up

,windows vulnerability,follina vulnerability,follina,windows
#

This is the hidden content, please

• Sign In
• or
• Sign Up

#Releases #Windows #Update #Fix #Follina #Vulnerability #Actively #Exploited #Hackers

This is the hidden content, please

• Sign In
• or
• Sign Up