Security News Ensure Microsoft Malware Protection Engine is updated - patch already released

[soccer97]

Hours before today’s Patch Tuesday release on the eve of May 8, Microsoft released an emergency updated to fix a vulnerability in their Malware Protection Engine. This critical vulnerability allows an attacker to take complete control of the victim’s machine by just sending an e-mail attachment. When the malware protection engine scans the attachment the malicious code in the file gets executed, allowing the attacker complete and full access to the computer. The attack can also be carried out by sending the file via an instant message or having the victim download the file from a website. It is absolutely essential that organizations using Microsoft Malware Protection Engine make sure that they are at version Version 1.1.13704.0 or later. Users should also check if they are patched for CVE-2017-0290, which was released for the same issue today.

This was not widely publicized as it occurred right before Patch Tuesday. It affects the entire product line from Enterprise and Consumer PC's running Windows Defender.

Ensure that you have updated Microsoft Malware Protection Engine to version 1.1.13704.0 . You may want to manually trigger an update if you are unsure,especially if you rely on Windows Defender as your resident AV.

This patch was included in May 2017's Patch Tuesday. The Creators update for Windows 10 provides additional protection. Also of importance are the Microsoft Office Vulnerabilities.

If you are running a Click-To-Run installation (Office 365) you can manually trigger an update by opening a program and clicking File > Account > Update Options> Update now.

Just a heads up to make sure all software is patched. As posted in another post, V2 has been released, and there may likely be a v3.

The main TV networks are reporting fear that on Monday morning, as workers return to the office and boot their PC's that there may be a large increase in the number of infections.

No need for panic - just be cautious

 

[Ink]

Posted a GIF at thread below.

Update - Windows Defender vulnerability, Update to Engine v1.1.13704.0 or higher