According to security experts, about a million users are at risk of an attack that could be as severe as the WannaCry attack in 2017.The new threat is related to the BlueKeep. The severity of this vulnerability led Microsoft and the New Zealand Cyber Security Centre to send urgent warnings to users to update their operating systems.
Microsoft warns that operating systems prior to Windows 8 are at risk from the BlueKeep vulnerability.
Microsoft had previously addressed BlueKeep earlier this year, but it discovered that more than a million computers were still vulnerable.
BlueKeep vulnerability allows hackers to take control of a computer remotely.
The fact that BlueKeep can be used so easily means that it can affect thousands of computers.
Microsoft has rated the vulnerability as very serious. In fact, it has rated it 9.8 out of 10, comparing it fatally to WannaCry.
In 2017, WannaCry ransomware affected thousands of Windows computers worldwide.
It is recommended to update the systems immediately to avoid any risk.
The computers at risk are those running Windows 7, XP, Windows Server 2008 R2 and Windows Server 2008. Windows 8 and 10 are not at risk.
According to the Australian Cyber Security Centre, WannaCry ransomware caused huge financial damage worldwide.
A year later, MalwareBytes revealed that WannaCry is still affecting thousands of computers in Australia and millions around the world. Specifically, it discovered 3,388 infected systems in Australia and approximately three million computers in other countries.
According to Microsoft, the BlueKeep vulnerability can cause as much damage as WannaCry.
“The BlueKeep vulnerability is readily available to cybercriminals who seek to exploit vulnerable systems en masse. These criminal groups look for vulnerable, outdated systems that are easily accessible.”
How to protect your systems
As mentioned above, the BlueKeep vulnerability affects over 1 million computers. Microsoft is offering patches for vulnerable operating systems, such as Windows 7, Windows Server 2008 R2, and Windows Server 2008, as well as unsupported systems, such as Windows 2003 and Windows XP.
"If you are using Windows 7, we recommend that you update your software as soon as possible," says CERT NZ.
"If you are using Windows XP, we recommend upgrading to a new version of Windows.".
These updates are not performed automatically. Users must perform the updates "manually.".
Windows 8 and Windows 10 are not affected. However, CERT NZ recommends enabling automatic updates so that future software updates can be done automatically.
What happens if I don't update?
Security company Sophos has released a video showing how hackers can gain complete control of a computer without having to develop malware.
The company warns that the BlueKeep vulnerability spreads very easily. If hackers gain access to one system, they can easily take control of other systems.
Other security companies, such as McAfee, have warned users about the BlueKeep vulnerability in the past.
The vulnerability is very dangerous, which is why it is necessary to update systems.
