VPN Password Flaw Packs Punch -- Redmondmag.com

Barney's Blog

VPN Password Flaw Packs Punch

I have some major concerns with how some exploits are created, released and publicized. I'm glad we have security experts to tighten our security. When they write virus definitions, develop security tools and help us understand how to protect ourselves, they do a great service.

Part of what they do is to create exploits to show us where the flaws lie. The problem is these exploits can then be used to attack us. This is apparently what may be happening with two attack tools shown at a recent Defcon event. One tool steals passwords from Wi-Fi networks and then nabs the traffic that flows over these networks. The other tool cracks the passwords it finds. A nice little one-two punch.

So why on earth were these tools, harmful as they are, released?

Microsoft, probably scratching its head like me, released a security advisory but has no security update to stop the attacks. I'd check out my Microsoft advisories for more details and advice.

Posted by Doug Barney on 08/27/2012 at 1:19 PM

Featured

Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.
Fallout from Microsoft's 'Midnight Blizzard' Saga Hits Feds

When the Russian attack group Midnight Blizzard successfully breached Microsoft corporate e-mail accounts late last year, it apparently managed to steal U.S. government agency e-mails, too.
PowerShell Script Used in Phishing Attack May Be AI-Generated

A PowerShell script being used in a novel malware campaign may have been created by AI, according to security researchers at Proofpoint.
Using Microsoft Office to Build a Network Diagram, Part 1

Keeping documentation is a great way to ease your future hardware refresh and have what you need for insurance purposes.
Microsoft Claims Breakthrough in Quantum Computing Reliability

A new paper details Microsoft's recent progress in quantum computing -- specifically, its development of a system that is both significantly less prone to errors and better at correcting them.