Microsoft was aware months ago of a critical security vulnerability well before hackers exploited it to breach Google, Adobe and other large U.S. companies but did not patch the hole until Thursday.
The software giant had intended to release a patch for the flaw in February — more than four months after learning about it — but had to speed up that plan and roll it out this week in the wake of news that Google and others had been hacked through the flaw, the world’s largest software maker acknowledged Thursday.
Meron Sellen, a security researcher at BugSec, an Israeli firm, quietly reported the vulnerability to Microsoft in September, according tosecurity firm Kaspersky.
Microsoft confirmed it learned of the so-called “zero-day” flaw months ago.
According to Microsoft, “An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.”
The flaw, which primarily affected IE6, allowed hackers to download malware to employee computers to gain access to intellectual property at Google, as well as information connected to Gmail users. It’s unknown what the hackers obtained from some 33 other companies — hi-tech, financial and defense — that were also targeted in the attack.
Although Microsoft recognized the severity of the flaw at the time Sellen reported it, the company held off releasing a patch so it could be included in a cumulative update for IE planned next month, the company said.
A zero-day flaw is a vulnerability for which there is currently no patch. It’s also a flaw that is generally unknown to the software vendor, which gives hackers who may be aware of the flaw a jump on developing malware to exploit it.
It’s unknown if other companies were breached through the flaw prior to the high-profile hacks disclosed last week. Most companies are unwilling to acknowledge a breach, let alone provide public details about how they were hacked.
Google disclosed last week it discovered in mid-December that it had been hacked in an attack originating from China, about three months after Microsoft learned of the vulnerability. Adobe followed Google, announcing it, too, was hacked. Security firm iDefense said it had information that at least 34 companies were breached in the coordinated attack.
On Thursday, meanwhile, Microsoft released a cumulative security update for Internet Explorer that fixes the flaw, as well as seven other security vulnerabilities that would allow an attacker to remotely execute code on a victim’s computer.
“Our investigation into this responsibly reported vulnerability began early September,” Jerry Bryant, senior security program manager for Microsoft, said in a statement. “As part of this investigation we began working on an update to help protect customers. We became aware of the recent attacks in mid-January and as part of our investigation determined the vulnerability being used in these attacks was similar to the one investigated in September.”
Photo: FastJack/Flickr
Share This
Sphere It
It’s not just the world’s most expensive potato; it’s one of the world’s five most expensive foods. It’s called La Bonnotte and it grows only on the French Isle of Noirmoutier.
The costly tuber owes its price to the fact that it must be harvested by hand and that its growing season lasts a mere ten days—from May 1st to May 10th. La Bonnotte is so fragile, in fact, that it would’ve gone extinct between World Wars I and II if not for a group of devotees to the pricey potato.
The potato’s flavor is said to be both earthy and salty, owing its complexities at least partially to the presence of algae and seaweed in the soil.
La Bonnotte can be purchased from ritzy restaurants in France and the Netherlands until around May 15th. While normally sold for around €70 per kilo (US $45 per pound), the potato has been sold for up to €500 per kilo (US $322 per pound).
via Fresh Plaza
Share This
Sphere It
Cheese is likely the most popular dairy product in the world, a food that predates written history. In 2004 alone, over 18 million metric tons of cheese were produced worldwide. The world’s most expensive cheese, however, is only produced at one farm and at a very specific time of year.
Unusually, the cheese isn’t made from cow’s milk—the milk comes from moose! Moose House, a 59-acre moose farm located in northern Sweden, is where the cheese is produced from three foundling moose named Gullan, Haelga, and Juna.
The moose are unusually tame, which is the only reason Moose House owners Christopher and Ulla Johannson can collect milk for the cheese. Even then, they can only be milked between May and September and the process takes about 2 hours per animal, hence the outstanding price of the cheese.
The most expensive cheese in the world is 12% fat and 12% protein and about 660 lbs are produced annually. The Johannsons sell it to high end Swedish hotels and restaurants for about $500 per pound.
Share This
Sphere It
French luxury firm S. T. Dupont—no relation to the chemical company—has been dealing in extravagance since 1872, when it was founded by Simon Tissot Dupont. Recently, for instance, they created a line of accessories inspired by the 2006 James Bond film, Casino Royale. This year, they’ve produced the world’s most expensive lighter.
Part of the company’s Prestige Collection, the Ligne 2 lighter comes in four distinct varieties. While the solid gold, white gold and the “Rose” pink gold and diamond lighters are all exquisite in their own ways, the Ligne 2 Champagne is truly exceptional. Made of 18-karat white gold and decorated with 462 diamonds (5.2 carats) of GVS quality, the Ligne 2 Champagne positively glitters with excess.
The most expensive lighter in the world can be had for $79,000. Its companion piece, a pen with another 502 diamonds, commands a mere $74,000 price tag.
Share This
Sphere It
Luxury designer Alexander Amosu, whose London-based design house is mostly known for gem-studded phones and accessories, has done something a little different this year—he’s created the world’s single most expensive suit.
The fabric of the single-breasted suit is made from vicuña wool, the most expensive wool in the world due to its scarcity and stringent regulations on wool-gathering, and qiviut, luxury wool made from the coats of muskoxen. It’s also threaded with 18-karat gold and its single button features pave set diamonds.
This fantastic suit took a total of 80 hours to make and has already been sold to an anonymous buyer for an equally fantastic price of £70,000—over US $100,000.
Share This
Sphere It
In its original form, the word “whisky” meant “water of life.” I’m sure some of you readers out there will agree with that sentiment. Luckily for you, there’s quite a variety of different whiskies (or “whiskeys,” if we’re talking about American or Irish liquors). Check out the most expensive whiskies in these popular varieties.
The Most Expensive Bourbon Whiskey
$300
The most expensive Bourbon is the 16 Year Old A. H. Hirsch Reserve, one of the few remaining examples of the Kentucky pot-still tradition.
The Most Expensive Canadian Whisky
$10,000
The world’s most expensive Canadian rye whiskey was presented to Queen Elizabeth II at the Kentucky Derby in 2007. If it were sold, it would be expected to go for over $10,000
The Most Expensive Scotch Whisky
$58,000
The world’s most expensive Scotch whisky is a Dalmore 62 Highland Malt Scotch Whisky sold to an anonymous buyer and, reportedly, shared with five of his friends in 2005.
The Most Expensive Irish Whiskey
$143,020
One of the last remaining whiskeys from the Nun’s Island Distillery in Galway, Ireland, this particular elixir is still up for sale at £100,000. If purchased, it will be the most expensive whiskey ever sold.
Share This
Sphere It
AMD has officially announced that it is splitting into two companies - one to design chips and one to carry out the actual fabrication process.
Abu Dhabi investment firms will be handing over an estimated $6-billion to the new companies. This fundage will also be used to create a new chip fabrication plant in Albany, New York and to refurbish one in Germany.
Considering that AMD is holding on to a $5-billion debt we hope that this solution will be enough to trump the possibility of shutting down shop. Hopefully, reducing the chance that Intel will completely monopolize the chip market. After all, competition reduces chip prices for us the consumer.
Good luck AMD & the newly founded ATIC (Advanced Technology Investment Company)
Share This
Sphere It
Next Page »
