Hello,

We noticed you're browsing in private or incognito mode.

To continue reading this article, please exit incognito mode or log in.

Not an Insider? Subscribe now for unlimited access to online articles.

Intelligent Machines

Microsoft fixes critical security flaws in Windows

Microsoft Corp. released four critical patches Tuesday to plug security holes in several versions of its Windows operating system, Internet Explorer Web browser and other programs.

The patches, which carried Microsoft’s highest security warning, all are to prevent malicious hackers from remotely taking control of computers without permission.

Three of the patches aim to protect Windows users who unwittingly expose their computers to attack by visiting Web pages infected with malicious code, or look at similarly tainted e-mails with Outlook Express or Windows Mail. A fourth patch prevents hackers from gaining remote access to PCs by installing a specially crafted program.

Two of these critical updates fix holes in the company’s newest operating system, Windows Vista, which Microsoft has touted as the most secure ever.

Vista went on sale to consumers at the end of January; in April, Microsoft broke its once-monthly update schedule with an emergency fix after the company and security experts found hackers were exploiting a hole in the way Vista and other versions of Windows handle animated cursor files.

Microsoft also Tuesday released a patch for its Visio diagram drawing program and a patch for a vulnerability in Windows that could allow unauthorized users to break into computers to steal passwords and other user information.

Additionally, Microsoft released seven non-security, high-priority updates Tuesday, including a monthly update to a tool that removes harmful software from PCs.

On the second Tuesday of each month, the Redmond, Wash.-based software maker releases security updates. Windows users can download patches from Microsoft’s Web site or get them through an automatic update system.

Spammers are taking advantage of ”Patch Tuesday” to send e-mails that appear to come from Microsoft, but that actually install programs that let hackers gain future access to infected PCs. Fred Touchette, a security analyst for the spam and virus filtering company AppRiver LLC, said he has seen this particular tactic twice before, most recently in 2004. The current attack, which started late last week, is ”pretty small,” he said.

Become an MIT Technology Review Insider for in-depth analysis and unparalleled perspective.

Subscribe today
More from Intelligent Machines

Artificial intelligence and robots are transforming how we work and live.

Want more award-winning journalism? Subscribe and become an Insider.
  • Insider Plus {! insider.prices.plus !}* Best Value

    {! insider.display.menuOptionsLabel !}

    Everything included in Insider Basic, plus the digital magazine, extensive archive, ad-free web experience, and discounts to partner offerings and MIT Technology Review events.

    See details+

    Print + Digital Magazine (6 bi-monthly issues)

    Unlimited online access including all articles, multimedia, and more

    The Download newsletter with top tech stories delivered daily to your inbox

    Technology Review PDF magazine archive, including articles, images, and covers dating back to 1899

    10% Discount to MIT Technology Review events and MIT Press

    Ad-free website experience

  • Insider Basic {! insider.prices.basic !}*

    {! insider.display.menuOptionsLabel !}

    Six issues of our award winning print magazine, unlimited online access plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    Print Magazine (6 bi-monthly issues)

    Unlimited online access including all articles, multimedia, and more

    The Download newsletter with top tech stories delivered daily to your inbox

  • Insider Online Only {! insider.prices.online !}*

    {! insider.display.menuOptionsLabel !}

    Unlimited online access including articles and video, plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    Unlimited online access including all articles, multimedia, and more

    The Download newsletter with top tech stories delivered daily to your inbox

/3
You've read of three free articles this month. for unlimited online access. You've read of three free articles this month. for unlimited online access. This is your last free article this month. for unlimited online access. You've read all your free articles this month. for unlimited online access. You've read of three free articles this month. for more, or for unlimited online access. for two more free articles, or for unlimited online access.