Microsoft's 'Patch Tuesday' for March caused quite a stir in the infosec community yesterday, as it fixed a Stuxnet vulnerability that was originally patched in 2010. According to Dave Weinstein of HP's Zero Day Initiative, "The patch failed. And for more than four years, all Windows systems have been vulnerable to exactly the same attack that Stuxnet used for initial deployment." Yikes!
Obviously this patch should be deployed immediately, but after you're done with the update take a look at our Twitter roundup for the latest news on this vulnerability.
Stuxnet Vulnerability Announcement from ZDI:
— Martijn Grooten (@martijn_grooten)March 10, 2015
Detailed Analysis from ZDI:
— Zero Day Initiative (@thezdi)March 10, 2015
https://www.youtube.com/embed/yBJUytqBN70
Coverage Highlights:
— Eugene Kaspersky (@e_kaspersky)March 11, 2015
— Richi Jennings (@RiCHi)March 11, 2015
— Mohit Kumar (@unix_root)March 11, 2015
— Lionytics™ (@lionytics)March 11, 2015
— Symantec (@symantec)March 11, 2015
— Crimes Cibernéticos (@Cyb3rCrimes)March 12, 2015
