Microsoft has issued an emergency patch for a security bug that compromised Windows 10 earlier this week. The fix is available via Windows Update and the usual update mechanisms.
The Windows-maker announced the existence of the vulnerability, describing it as "critical," during this month's Patch Tuesday. The bug can be found at the Windows 10 SMB, or server message block, which allows for swift communication between devices. A compromised SMB is a vehicle for attackers to harm any computer, injecting it with malicious code.
Users informed of the security bug were left concerned earlier this week due to the possibility of a "wormable" attack similar to WannaCry three years back. Microsoft was quick to address the issue and rolled out an emergency patch to fix the Windows 10 vulnerability, including Windows Server 2019, versions 1903 and 1909.
According to Jamie Hankins, head of security and threat intelligence research at Kryptos Logic, nearly 50,000 unpatched servers connected to the internet can be easily exploited. However, the number is potentially greater, as it excludes computers linked to those vulnerable servers.
While it's good news a fix has been rolled out, Microsoft did not give out specifics as to what caused the "leaked" bug. Experts at Cisco and Fortinet described the bug in a blog post, but references to the vulnerability have since been removed.
Note that older versions of Windows are not affected by the security bug, including Windows 7.
Meanwhile, Microsoft has decided to cancel its 2020 Microsoft Build developers conference originally scheduled from May 19 to 21 due to the COVID-19 pandemic. The company instead is making plans to hold the event online, similar to what I/O and F8 organizers are currently working on.
"In light of the health safety recommendations for Washington State, we will deliver our annual Microsoft Build event for developers as a digital event, in lieu of an in-person event," Microsoft said in a statement to The Verge.
Microsoft's announcement follows the cautionary measures many companies are implementing to protect its workers and consumers from the coronavirus. Many fans have already expected the cancelation, given the Washington state has banned the gathering of 250 people or more.
As of writing, Microsoft hasn't made updates to the Build homepage yet, so it's possible to still purchase a ticket, but it's best not to do that. Those who have bought tickets, however, are advised to contact the Windows-maker for refunds.
