“This security update resolves a vulnerability in Microsoft Windows that facilitates exploitation of the publicly disclosed FREAK technique, an industry-wide issue that is not specific to Windows operating systems,” the post stated.
Related: Microsoft now says Windows computers could have a ‘FREAK’ attack
The MS15-031 update, as it’s been named, is being recommended to Windows users for installation. Microsoft has fixed SSL implementations in its software to reduce the chances of a FREAK attack.
FREAK is short for Factoring attack on RSA-EXPORT Keys. When a FREAK attack occurs, hackers have the ability to intercept information that is transferred between an end-user and a website. The attacker begins by injecting malware into the connection that causes the two parties to use a weak, 512-bit encryption key. After this has happened, the weak connection allows the hacker to tap into sensitive data.
Microsoft had originally said that Windows was not vulnerable to an attack, but quickly backtracked with an announcement on its TechNet blog last week.
“Microsoft is aware of a security feature bypass vulnerability in Secure Channel that affects all supported releases of Microsoft Windows,” the company wrote. “We are actively working with partners in our Microsoft Active Protections Program to provide information that they can use to provide broader protections to customers.”
Smartphones and devices that run iOS or Android have been deemed susceptible to FREAK attacks, so Windows users aren’t the only ones with something to worry about.
Editors' Recommendations
- Windows 11 might nag you about AI requirements soon
- Windows 11 tips and tricks: 8 hidden settings you need to try
- Beware! The latest Windows 11 update might crash your PC
- A new Windows 11 hardware system requirement may be incoming
- Windows 12 could repeat Windows 11’s big mistake
