The attack window, if you'll pardon the pun, is somewhat limited, to say the least, and I suspect that it will have closed completely when the next Microsoft Defender Antivirus update comes along very shortly.
Which means that privilege escalation doesn't appear possible here.Īlthough I agree with Bleeping Computer that it does provide Windows 10 administrators with another executable to watch out for, and attackers with another to potentially exploit, I'm not going to be losing any sleep over this one. The malicious file can't, it would seem, be downloaded to another users' folder or to those directories the attacker had no write privileges for. To download a file in the first place requires access to a local user account, be that admin or a limited-user one. MORE FROM FORBES Google Exposes Windows 10 Security Update Blunder By Davey Winder The threat doesn't extend to actually bypassing Windows 10 defenses then. These programs detect malicious files downloaded to the system through the antivirus file download feature." However, any malicious file downloaded using this threat avenue will still be detected by Microsoft Defender Antivirus and so blocked from executing.Ī Microsoft spokesperson confirmed as much when I asked for a statement: "Despite these reports, Microsoft Defender antivirus and Microsoft Defender ATP will still protect customers from malware.
0 kommentar(er)
