Microsoft rushed out patch to prevent ‘worm’ exploit
More details are released about the critical security patch that Microsoft had to hurry out this week.

Microsoft has revealed the emergency patch it released outside of the Patch Tuesday cycle was to prevent an internet worm from spreading.
The MS08-067 patch, which was rated as critical', fixed a vulnerability could have been used in the creation of a wormhole exploit.
More specifically, it resolved a privately reported vulnerability in the server service. According to the security bulletin, the buffer overflow vulnerability allowed remote code execution if the affected system received a specially crafted RPC request.
Graham Cluley, senior technical consultant at Sophos, said that the vulnerability was very serious and that ID administrators were advised to patch the affected systems as a priority in case hackers chose to exploit it with an internet worm.
SophosLab's principle researcher Vanja Svajcer said that the last time he saw a similar vulnerability was in 2004 with the W32/Sasser worm.
He said: "It remains to be seen how interested the virus writers will be in this vulnerability, considering a general trend towards hidden malware that does not replicate.
"The noise of generated network traffic seen with large scale outbreaks of self-replicating malware may not appeal to modern day virus writers."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Security vendor Symantec said that while it had not seen wide-spread exploitation of the issue, it did see reports of a certain file in 'n2.exe' being downloaded on certain computers, which it was investigating.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
Vulnerability management complexity is leaving enterprises at serious risk
News Fragmented data and siloed processes mean remediation is taking too long
By Emma Woollacott Published
-
96% of SMBs are missing critical cybersecurity skills – here's why
News The skills shortage hits SMBs worse as they often suffer from a lack of budget and resources
By George Fitzmaurice Published
-
Sophos Firewall Virtual review: Affordable network protection for those that like it virtualized
Reviews Extreme network security that's cheaper than a hardware appliance and just as easy to deploy
By Dave Mitchell Published
-
MSPs are struggling with cyber security skills shortages
News A shortage of tools and difficulties keeping pace with solutions were also ranked as key issues for MSPs
By George Fitzmaurice Published
-
Nearly 70 software vendors sign up to CISA’s cyber resilience program
News Major software manufacturers pledge to a voluntary framework aimed at boosting cyber resilience of customers across the US
By Solomon Klappholz Published
-
Sophos and Tenable team up to launch new managed risk service
News The new fully managed service aims to help organizations manage and protect external attack surfaces
By Daniel Todd Published
-
Ransomware groups are using media coverage to coerce victims into paying
News Threat actors are starting to see the benefits of a more sophisticated media strategy for extracting ransoms
By Solomon Klappholz Published
-
Beat cyber criminals at their own game
Whitepaper A guide to winning the vulnerability race and protection your organization
By ITPro Published