This Flaw Existed In Windows For 17 Years And Was Just Fixed Now, Do You Know It?
Dhir Acharya - Jul 15, 2020
Called SigRed, the flaw in Windows DNS existed for 17 years and no one noticed. Yesterday, Microsoft released a patch that fixes this flaw.
- What Is Runtime Broker And What Does It Do? Simple Explanation
- Looking For A Rechargeable Wireless Mouse? Check Out This List
- Microsoft Wants To Resurrect The Dead And Let Them Talk To Their Loved Ones
Yesterday, Microsoft rolled out a patch that fixes a major, long-standing flaw of the Windows DNS (Domain Name System). The patch came out alongside the regular Tuesday Windows update, fixing the SigRed flaw found by Israeli security company Check Point, according to Wired.
The DNS is like a phonebook and your IP (Internet Protocol) address is like your phone number. Each computer has a different IP address through its network provider while the domain names are translated to IP address by the DNS. Your browser needs the DNS to load a website like you need the phone book to search for a phone number.
SigRed exploits Windows DNS and it’s a wormable bug that can spread between computers through the DNS.
![Screenshot 2020 07 14 At 10 34 48 Compressed](https://img.mobygeek.com/resize/730x-/2020/07/15/screenshot-2020-07-14-at-10-34-48-compressed-2278.jpg)
Microsoft and Check Point say that this flaw is critical as it scores 10/10 on the common vulnerability scoring system (or CVSS), an industry standard to assess security issues on computers. Every small, medium-sized organization worldwide uses Windows DNS, Wired revealed, so this flaw is really serious, not to mention it wasn’t found for 17 years.
This security flaw is in Windows Domain Name System Security Extensions that strengthens DNS authentication. Without this system, hackers can easily intercept DNS queries and redirect users to a fake site that may trick them into providing their personal information and steal your identity. Small-medium online retail businesses using Windows DSN are at the highest risk of being affected by SigRed.
![Microsoft Windows Updates Cycle Arrows Laptop Mobi](https://img.mobygeek.com/resize/730x-/2020/07/15/microsoft-windows-updates-cycle-arrows-laptop-mobi-1463.jpg)
Even worse, hackers can exploit this vulnerability without needing the target to do anything. A person that has been hacked might not even realize their server has been accessed and controlled by a stranger.
“Once you’re inside the domain controller that runs the Windows DNS server, expanding your control to the rest of the network is really easy.”
To be attacked remotely, the target DNS server has to be exposed to the internet directly, which barely happens because Windows DNS is usually run behind a firewall. But if a hacker can access a company’s LAN or wifi, they can get access to the server.
The one lucky thing, however, is that the flaw hasn’t been exploited so far, but you still have to patch your PCs and servers before a hacker takes the chance. All you need to do is installing the latest Windows update on your computer by opening Settings or typing ‘updates’ into the search bar on your taskbar.
>>> How To Speed Up Windows 10 - Ten Tips You Should Keep In Mind
Featured Stories
![PDF Prodigy: Expert Techniques for Editing](https://img.mobygeek.com/crop/320x180/photo_galleries/2024/01/18/pdf-6fd5.png)
ICT News - Jan 18, 2024
PDF Prodigy: Expert Techniques for Editing
![The Psychology of Casino Game Design](https://img.mobygeek.com/crop/227x128/2023/08/03/casino-india-89d9.jpg)
ICT News - Aug 03, 2023
The Psychology of Casino Game Design
![3 Reasons your privacy gets compromised online](https://img.mobygeek.com/crop/227x128/2022/05/17/hacker-9565.jpg)
ICT News - May 17, 2022
3 Reasons your privacy gets compromised online
![Apple Devices For Sale](https://img.mobygeek.com/crop/227x128/2022/05/11/96174530-5607-11ec-9bbc-ba5fcc880a33-cf-4827.jpg)
ICT News - May 11, 2022
Apple Devices For Sale
![Pin-Up Review India 2022](https://img.mobygeek.com/crop/227x128/2022/04/12/pexels-andrea-piacquadio-3768128-05c6.jpg)
ICT News - Apr 12, 2022
Pin-Up Review India 2022
![Choosing between a shared and a dedicated server for gaming](https://img.mobygeek.com/crop/227x128/2022/03/29/pexels-field-engineer-442150-df92.jpg)
ICT News - Mar 29, 2022
Choosing between a shared and a dedicated server for gaming
![How The Internet Came Into Being](https://img.mobygeek.com/crop/227x128/2022/03/18/pexels-andrea-piacquadio-914931-4083.jpg)
ICT News - Mar 18, 2022
How The Internet Came Into Being
![The Best Gaming Tech of 2022](https://img.mobygeek.com/crop/227x128/2022/03/17/florian-olivo-mf23rf8xary-unsplash-7b61.jpg)
ICT News - Mar 17, 2022
The Best Gaming Tech of 2022
![Technologies that enable the development of online casinos with live dealers](https://img.mobygeek.com/crop/227x128/2022/02/16/istockphoto-1200707009-612x612-f9fa.jpg)
ICT News - Feb 16, 2022
Technologies that enable the development of online casinos with live dealers
![Remember These Safety Measures While Playing at an Online Casino](https://img.mobygeek.com/crop/227x128/2022/02/08/pexels-photo-3279685-8114.jpeg)
ICT News - Feb 08, 2022
Comments
Sort by Newest | Popular