Microsoft aims barrage of fixes at Stuxnet and more

Oct 12, 2010
Microsoft on Tuesday released a record high number of software patches aimed at countering computer threats including a Stuxnet "worm" attacking industrial networks.

Microsoft on Tuesday released a record high number of software patches aimed at countering computer threats including a Stuxnet "worm" attacking industrial networks.

The 49 fixes released by were ranked in importance from "critical" to "moderate" and addressed vulnerabilities in an array of Microsoft programs used in personal computers.

"Users should apply these patches ASAP," said Trend Micro threat researcher Ivan Macalintal. "It should be a top priority."

The unprecedented number of fixes promised to make installing the patches a chore for technology workers managing business networks.

"The release is humongous; a record breaker," Macalintal said. "I think it is going to be a headache, especially for enterprise (business systems)."

Microsoft bulletin MS10-073 indicated a patch for a vulnerability that Stuxnet "currently leverages."

Stuxnet targets control systems made by German industrial giant Siemens commonly used to manage water supplies, oil rigs, and other industrial facilities.

Stuxnet has been dubbed the world's "first cyber superweapon" by experts, and has wreaked havoc on computerized industrial equipment in Iran.

Microsoft previously patched two of the four vulnerabilities that Stuxnet took advantage of in Windows-based computer networks. The patch released on Tuesday is intended to close a third door to the .

The vulnerability exploited by Stuxnet allowed an elevation of control privileges for the program once it was in a Windows-based network, according to Kaspersky Lab Americas senior anti-virus researcher Roel Schouwenberg.

"As such I think the real life impact on the spread of Stuxnet will be rather limited," Schouwenberg said.

"Machines are either going to be already patched for the remotely exploitable vulnerabilities which would introduce Stuxnet onto the system or they're not going to have any of the Stuxnet related patches installed."

Analysts say may have been designed to target Iran's nuclear facilities, especially the Russian-built first atomic power plant in the southern city of Bushehr.

Explore further: Windows Insiders can try out Project Spartan browser

Related Stories

Stuxnet worm rampaging through Iran: IT official

Sep 27, 2010

The Stuxnet worm is mutating and wreaking further havoc on computerised industrial equipment in Iran where about 30,000 IP addresses have already been infected, IRNA news agency reported on Monday. ...

World's first 'cyber superweapon' attacks China

Sep 30, 2010

A computer virus dubbed the world's "first cyber superweapon" by experts and which may have been designed to attack Iran's nuclear facilities has found a new target -- China.

Recommended for you

Mandela phone app for tourists in S.Africa

24 minutes ago

A phone app tracing the footsteps of Nelson Mandela was launched Wednesday in South Africa to encourage tourists to explore his life story, 25 years after his release from prison.

App to test synaesthesia

50 minutes ago

Four in hundred people have a special mix up of their senses, called synaesthesia. A new app from Radboud University contains four playful tests for synaesthesia. Should you happen to have synaesthesia, you ...

Windows Insiders can try out Project Spartan browser

Mar 31, 2015

Microsoft has opened up the (literal) windows, called in creatives, and has been engineering a next-generation browser. Project Spartan is to reflect the general mood of fresh air at Redmond. Although "Project ...

New taxi app challenges Uber in S.Korea

Mar 31, 2015

South Korea's top mobile messenger operator launched a new web-based cab-hailing service Tuesday to compete with California-based Uber, whose service has been subjected to crackdowns from state regulators.

User comments : 0

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.