{"id":26994,"date":"2017-04-17T11:25:24","date_gmt":"2017-04-17T11:25:24","guid":{"rendered":"http:\/\/www.biphoo.com\/bipnews\/?p=26994"},"modified":"2017-04-17T11:25:24","modified_gmt":"2017-04-17T11:25:24","slug":"microsoft-patched-nsa-hack-windows-flaws-before-leak","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/technology\/microsoft-patched-nsa-hack-windows-flaws-before-leak.html","title":{"rendered":"Microsoft patched NSA hack\u00a0Windows flaws before leak"},"content":{"rendered":"

\n\tMicrosoft patched NSA hack Windows flaws before leak<\/span><\/span><\/strong><\/span>
\n<\/h2>\n

\n\tMicrosoft says it had already fixed software flaws linked to an alleged breach of the global banking system before they were exposed last week.<\/span><\/span><\/span>\n<\/p>\n

\n\tOn Friday, a group called the Shadow Brokers published details of several hacking tools, indicating they had been used by the US National Security Agency (NSA) to spy on money transfers.<\/span><\/span><\/span>\n<\/p>\n

\n\tReports suggested Microsoft's Windows operating system remained vulnerable.<\/span><\/span><\/span>\n<\/p>\n

\n\tBut the firm revealed it had in fact addressed the problem in March.<\/span><\/span><\/span>\n<\/p>\n

\n\t"Customers have expressed concerns around the risk [Shadow Brokers’] disclosure potentially creates," it said in a security update.<\/span><\/span><\/span>\n<\/p>\n

\n\t"Our engineers have investigated the disclosed exploits, and most of the exploits are already patched."<\/span><\/span><\/span>\n<\/p>\n

\n\tThe company has not, however, revealed how it became aware of the flaws.<\/span><\/span><\/span>\n<\/p>\n

\n\tMicrosoft normally acknowledges third parties who tip it off to problems, but has not done so in this case.<\/span><\/span><\/span>\n<\/p>\n

\n\tThe Reuters news agency reported that the company had told it that neither the NSA nor any other part of the US government had informed it of the hacking tools' existence.<\/span><\/span><\/span>\n<\/p>\n

\n\tThat calls into question how Microsoft learned of the issue – tech blog Ars Technica commented it was "highly unlikely" that the patch and leak would both have occurred so close together by coincidence.<\/span><\/span><\/span>\n<\/p>\n

\n\t'God's eye'<\/span><\/span><\/span>\n<\/p>\n

\n\tWhisteblower Edward Snowden had previously leaked documents in 2013 that alleged the NSA had carried surveillance of the Brussels-based Society for Worldwide Interbank Financial Telecommunication (Swift) for several years, but did not specify how.<\/span><\/span><\/span>\n<\/p>\n

\n\tSwift allows the world's banks to send payment orders and other messages about large financial transactions in a "secure and reliable" manner.<\/span><\/span><\/span>\n<\/p>\n

\n\tIt is used by about 11,000 financial institutions.<\/span><\/span><\/span>\n<\/p>\n

\n\t"If Shadow Brokers' claims are indeed verified, it seems that the NSA sought to totally capture the backbone of [the] international financial system to have a God’s eye [view]," blogged security researcher Matt Suiche after the latest leak.<\/span><\/span><\/span>\n<\/p>\n

\n\t"If the US had a specific target in the region's financial system, NSA penetration offers [an alternative to] merely relying upon good faith compliance procedures, standard diplomatic requests, or collaborating with Swift."<\/span><\/span><\/span>\n<\/p>\n

\n\tSwift has not confirmed it was compromised.<\/span><\/span><\/span>\n<\/p>\n

\n\t"We have no evidence to suggest that there has ever been any unauthorised access to our network or messaging services," it said in a statement on Friday.<\/span><\/span><\/span>\n<\/p>\n

\n\tThe BBC has not been able to verify the authenticity of the Shadow Brokers' claims, and the NSA has not provided comment.<\/span><\/span><\/span>
\n\t \n<\/p>\n

\n\tSource:- http:\/\/www.bbc.com\/news\/technology-39620534<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t