Today, Microsoft released a security update that patches a critical Windows vulnerability affecting all versions of Windows from Visa to Windows 10.
This flaw paired with another recent Flash bug allows attackers to gain control of browsers, elevate privileges, then install a backdoor on a victim’s computer. Reportedly, a hacker group known as Strontium (a.k.a APT28 and Fancy Bear) has used these exploits against the Democratic National Committee, Clinton campaign Chair John Podesta and former Secretary of State Colin Powell.
See Thu Pham’s blog post for ways to reduce your exposure to these type of attacks: https://duo.com/blog/security-update-for-windows-exploit-used-against-government-officials.
