A Twitter user SandboxEscaper just found a new zero-day vulnerability in Windows 10. The Twitter user also posted a proof-of-concept on their Github which tested and verified by US-CERT. Microsoft is aware of this vulnerability and is currently planning to a release a patch on its Patch Tuesday cycle on September 11, 2018. But currently, there is no fix to this vulnerability.
The vulnerability becomes active if a hacker is able to exploit the Advanced Local Procedure Call (ALPC) system. It allows a hacker to gain the system access as an administrator on a vulnerable Windows 10 64-bit PC or a Windows Server 2016. Some experts believe that for this vulnerability to exploit a PC it should gain local access first. It is not easy for a hacker to gain local access to your computer. For this purpose, a hacker will try many phishing tricks with you or trick you to install a custom developed malware which lets him/her local access on your Windows 10 PC.
Therefore the risk and threat level of this zero-day vulnerability are pretty low. As long as you stay vigilant about your network and PC security hackers will have a hard time targeting you. As there is no patch available for this zero-day vulnerability, therefore, you can just prevent it until Microsoft releases a patch for this.
Also Read: How to Download Windows 10 Redstone 5 ISO
So just wait for the official patch from Microsoft for this Zero Day Vulnerability and in the meantime follow the tips above to safeguard your Windows 10 PC.
The vulnerability becomes active if a hacker is able to exploit the Advanced Local Procedure Call (ALPC) system. It allows a hacker to gain the system access as an administrator on a vulnerable Windows 10 64-bit PC or a Windows Server 2016. Some experts believe that for this vulnerability to exploit a PC it should gain local access first. It is not easy for a hacker to gain local access to your computer. For this purpose, a hacker will try many phishing tricks with you or trick you to install a custom developed malware which lets him/her local access on your Windows 10 PC.
Therefore the risk and threat level of this zero-day vulnerability are pretty low. As long as you stay vigilant about your network and PC security hackers will have a hard time targeting you. As there is no patch available for this zero-day vulnerability, therefore, you can just prevent it until Microsoft releases a patch for this.
Also Read: How to Download Windows 10 Redstone 5 ISO
How to Prevent Windows 10 Zero-Day Vulnerability
- Install a good antivirus on your Windows 10 computer. Don’t just rely on free antivirus software. We highly recommend you Avast Internet Security 2018. Even if you don’t want to buy it then you can use its fully functional 30 days trial period to protect your PC until 11th September 2018. On or after this date Microsoft will release an update.
- Update Windows 10 and install any pending updates. Keep Windows 10 updated in all situations.
- I don’t know whether SMB has any relation with it but you can disable port 445 SMB to be on a safe side and to prevent ransomware attacks.
- Do not reply to suspicious emails, emails that ask you to download and install any files. Simply delete those emails which contain an executable (.exe) attachment.
- Do not click any unknown links in suspicious emails.
- Use a good quality VPN like ExpressVPN to hide your network activity.
- Do not download and install software from unknown sources. And always verify the software publisher before installing a software.
So just wait for the official patch from Microsoft for this Zero Day Vulnerability and in the meantime follow the tips above to safeguard your Windows 10 PC.
You May Also Read
Get Blog Updates Via Email Subscribe Now
Please check your email for the verification link. Click on the verification link to start your email newsletter subscription.
No comments:
Post a Comment