More help to fend off malware
In wake of cyber attack, Microsoft issues more patches for programs it no longer supports
In the wake of last month’s WannaCry malware outbreak, Microsoft has once again issued patches to programs it no longer supports, citing vulnerabilities in their code that could make them vulnerable to cyber attacks by nation-states or copycat organizations.
The patches come a month after the company issued patches for Windows XP computers to protect against WannaCry, despite its long-standing stance against updating older and unsupported versions of its Windows operating system.
“Due to the elevated risk for destructive cyber attacks at this time, we made the decision to take this action because applying these updates provides further protection against potential attacks with characteristics similar to WannaCrypt,” wrote Adrienne Hall, general manager for Microsoft’s cyber defense operations center. WannaCrypt is another name for the WannaCry ransomware.
The patches hit, as they have since 2003, on the second Tuesday of the month at 10 a.m. Pacific time, when Microsoft makes security and other fixes to its programs available for users who aren’t signed up for automatic updates — what’s known as “Patch Tuesday.”
Up until now, only customers who paid hefty fees could continue to get any support for older programs such as WindowsXP and Windows 8.1.
The release of the WannaCry malware, which seized files on hundreds of thousands of computers with demands for ransom, forced it to change its approach.
The company made available patches that protected against WannaCry despite its long-standing stance against providing patches for unsupported programs.
In a post accompanying the patches, Microsoft noted that anyone running currently-supported versions of Windows, such as Windows 10 or Windows 8.1, will automatically be updated as long as they have Windows Update enabled. Otherwise, “we recommend customers upgrade to the latest platforms.”