Security news
Security news3 April 2007
Microsoft issues patch to animated cursor vulnerability Emergency update protects against ANI file bug
The animated cursor vulnerability has been rated as critical by Microsoft
Sophos, a world leader in IT security and control, has advised computer users to install a critical security patch from Microsoft which patches a vulnerability in the way Windows handles animated cursors. The vulnerability, which has been exploited by in-the-wild malware, caused Microsoft to release an emergency patch outside of its normal cycle.
Normally Microsoft releases security patches on the second Tuesday of this month, but released this fix early because of concern that hackers were using the flaw in attempts to infect innocent PC owners.
"Although Microsoft has now issued a patch against this critical vulnerability, it is unlikely that we have seen the last of hackers' attempts to exploit the security flaw," said Graham Cluley, senior technology consultant at Sophos. "It is essential that every Windows computer is patched against this security hole, as cybercrimals are hell-bent on using flaws like this to break into as many computers as possible in their pursuit of hard cash."
Home users of Microsoft Windows can visit update.microsoft.com to have their systems scanned for Microsoft security vulnerabilities.
Sophos suggests that every IT manager responsible for security should consider subscribing to vulnerability mailing lists such as that operated by Microsoft at www.microsoft.com/technet/security/bulletin/notify.mspx.
Sophos continues to recommend companies protect their desktops and servers with automatically updated protection against viruses, spyware, and spam.
About Sophos
Sophos enables enterprises all over the world to secure and control their IT infrastructure. Sophos's network access control, endpoint, web and email solutions simplify security to provide integrated defenses against malware, spyware, intrusions, unwanted applications, spam, policy abuse, data leakage and compliance drift. With over 20 years of experience, Sophos protects over 100 million users in nearly 150 countries with its reliably engineered security solutions and services. Recognized for its high level of customer satisfaction and powerful yet easy-to-use solutions, Sophos has received many industry awards, as well as positive reviews and certifications.
Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com
