-
Ever wanted an RSS feed of all your favorite gaming news sites? Go check out our new Gaming Headlines feed! Read more about it here.
Windows 10 users: UPDATE NOW! Certificate validation is broken! (NSA: Critical Vulnerability Advisory issued)
- Thread starter neoak
- Start date
From an article I read about it:
Hopefully not this time! lol
OP
OP
Yeah, but wouldn't I need to specifically download a malicious file?
You're telling me you aren't downloading malicious files on the daily?
OP
OP
Ever heard of malicious ads?
Anything you download off the web can be malicious.
Drive-by downloading for example too, just visiting an infected site could get you screwed with Ransomware.
OP
OP
OP
OP
The old adage of "just don't click anything suspicious" or "just don't be stupid" on the internet is no longer relevant. Malicious ads, injected scripts, can and do download files to your PC. These ads are inserted into legitimate websites and inserted scripts can sometimes even bypass adblockers.
Unless you're willing to break your internet by running a noscript browser 24/7 on every site and manually approve every connection you are potentially vulnerable to an automated attack. And even with that it's possible for bots to hit your computer or network just by probing random IP addresses for known vulnerabilities.
Another common misconception I see is "I have nothing important no one would target me". Attacks aren't targeted, they're automated and just hit anything that is open.
Unless you're willing to break your internet by running a noscript browser 24/7 on every site and manually approve every connection you are potentially vulnerable to an automated attack. And even with that it's possible for bots to hit your computer or network just by probing random IP addresses for known vulnerabilities.
Another common misconception I see is "I have nothing important no one would target me". Attacks aren't targeted, they're automated and just hit anything that is open.
Last edited:
OP
OP
Definitely. People think that they can't be affected by stuff, which isn't true.
Yes, but there are multiple versions (cumulative updates):
KB4528760 - Windows 10 v1903/v1909 and Windows Server v1903/v1909
KB4534273 - Windows 10 v1809 and Server 2019
KB4534293 - Windows 10 v1803 and Server 2016 v1803
Last edited:
OP
OP
OP
OP
OP
OP
Check the Update History. You may have installed it yesterday.
Thanks for this. Update was installed last night. I am hopefully good to go.
Not installed and not available. Is this just up for the US? Anyone in UK or Europe have these patches for 1803, 1903 or 1909?
KB4528760 - Windows 10 v1903/v1909 and Windows Server v1903/v1909
KB4534273 - Windows 10 v1809 and Server 2019
KB4534293 - Windows 10 v1803 and Server 2016 v1803
OP
OP
Great, have to manually download it from the Update Catalogue site since I'm getting error messages whenever I try to update automatically. Restarting the services, deleting the update files and even running their Win10 diag tool couldn't help me. Sometimes I genuinely hate Win10.
Is Windows 7 Affected? Would be funny to see them have to release a patch 1 day after they "ended" patches.;
Edit- Seems these patches came out yesterday so windows 7 would still be included. Seems only Windows 10, Server 2016, Server 2019 are affected by this specific issue.
Edit- Seems these patches came out yesterday so windows 7 would still be included. Seems only Windows 10, Server 2016, Server 2019 are affected by this specific issue.
OP
OP
Drive-by downloads are a thing, which will initiate a download without your consent
It might be due to a problem on my end.
I have a bunch of updates lined up but they all say "Pending Install" with no option to make them install. One is at "Initializing" and never goes beyond that.
There's no update option when I go to turn off my computer as well so I'm trying to figure out how I can make it update again.
OP
OP
Download the KB manually?
If not, try this:
or if that doesn't work:
I was gonna make a post about how I haven't updated my W10 since 2018 and wasn't gonna start now, but then I noticed MS stealthed one in on September 22nd, wtf guys.
