MS Fix Shores Up Security for Windows Users
Summary: Microsoft released a point-and-click FixIt tool to block Windows from loading insecure DLLs from local and remote file-sharing locations, a workaround for DLL hijacking that stems from Windows default behaviors and poorly written third-party applications. The tool follows an earlier workaround released roughly a week before that required users to manually edit the Windows registry after installing and rebooting, and the FixIt still requires that initial tool to be installed first.
Key Takeaway: The Exploit Database lists vulnerable applications including Windows Live Mail, Windows Movie Maker, PowerPoint 2007, Skype, Opera, Media Player Classic and uTorrent, and Microsoft's own attack scenarios would likely work against a majority of average Windows users.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026