I-Microsoft imemezele ukulungiswa kwamalungelo ku-Microsoft Defender. Iphutha livumela ama-cybercriminals ukuthola amalungelo okuphatha ngezinhlelo zeWindows ezingavikelekile.
Ngokusho kwezibalo zenhlangano, i-Microsoft Defender yisinqumo esizenzakalelayo sokuvikela kwisoftware enonya, efakwe izinhlelo ezingaphezu kwezigidi eziyizinkulungwane ezingaphezu kwezigidi eziyizinkulungwane ezingama-1.
Ilungelo eliveziwe likhulisa ubungozi, elilandelwa njenge-CVE-2021-24092, liyasebenza kuzo zonke izinhlobo zeMicrosoft Defender kusukela ngo-2009, futhi lithinta yonke izingqinamba zeseva kanye nezamalintshi, ziqala ngeWindows 7 nangaphezulu.
Ama-cybercriminals anamalungelo okuqala womsebenzisi angasebenzisa ubungozi be-CVE-2021-24092 lapho enza ukuhlaselwa okuyinkimbinkimbi okuphansi, okubandakanya ukungabikho kokuxhumana komsebenzisi. I-Microsoft Qaphela ukuthi ubugebengu buthinta eminye imikhiqizo yezokuphepha yenhlangano, kufaka phakathi: Ukuvikelwa kokugcina, okubalulekile kwezokuphepha kanye nesikhungo sesikhungo esiphephelweni esiphephelweni.
Ubungozi be-CVE-2021-24092 butholwe yi-Sentinelone back ngoNovemba 2020. NgoFebhuwari 9, 2021, iMicrosoft yamemezela ukukhululwa kwesichibi ukuze iqede leli phutha, kanye nabanye obunye ubungozi.
I-CVE-2021-24092 Ukulimazeka kwatholakala kumshayeli we-BTR.SYS (owaziwa kangcono ngokuthi ithuluzi lokususa isikhathi sokususa), elisetshenziswa kwinqubo yokulungiswa ukuze ususe amafayela nokufakwa kwerejista okwenziwe nge-software enonya.
"Kuze kube yi-CVE-2021-24092 Engcupheni, bekunganakwa iminyaka eyi-12. Lokhu kwenzeke ngenxa yokucaciswa kwezimpawu zokwenza kusebenze kwale ndlela ethile. Sicabanga ukuthi leli phutha bekunzima ukulithola, ngoba umshayeli we-BTR.SYS uvame ukungabikhona kwi-hard drive yomsebenzisi, futhi asebenze kuphela uma kunesidingo (ngegama elihleliwe) futhi asuse, "kusho uSentinelone.
Indwangu ethokozisayo ku-CisoClub.ru. Bhalisela: Facebook | I-VK | I-Twitter | I-Instagram | I-Telegraph | Zen | Isithunywa | I-ICQ New | I-YouTube | Pulse.