“This security update resolves a vulnerability in Microsoft Windows that facilitates exploitation of the publicly disclosed FREAK technique, an industry-wide issue that is not specific to Windows operating systems,” the post stated.
Related: Microsoft now says Windows computers could have a ‘FREAK’ attack
The MS15-031 update, as it’s been named, is being recommended to Windows users for installation. Microsoft has fixed SSL implementations in its software to reduce the chances of a FREAK attack.
FREAK is short for Factoring attack on RSA-EXPORT Keys. When a FREAK attack occurs, hackers have the ability to intercept information that is transferred between an end-user and a website. The attacker begins by injecting malware into the connection that causes the two parties to use a weak, 512-bit encryption key. After this has happened, the weak connection allows the hacker to tap into sensitive data.
Microsoft had originally said that Windows was not vulnerable to an attack, but quickly backtracked with an announcement on its TechNet blog last week.
“Microsoft is aware of a security feature bypass vulnerability in Secure Channel that affects all supported releases of Microsoft Windows,” the company wrote. “We are actively working with partners in our Microsoft Active Protections Program to provide information that they can use to provide broader protections to customers.”
Smartphones and devices that run iOS or Android have been deemed susceptible to FREAK attacks, so Windows users aren’t the only ones with something to worry about.
Editors' Recommendations
- Windows 11 is about to make RGB peripherals way easier to use
- Is macOS more secure than Windows? This malware report has the answer
- Your Windows 11 screenshots may not be as private as you thought
- One of Windows 11’s most requested features may launch soon
- Windows 12: the top features we want to see in the rumored OS
