Thankful Thursday

Today I am grateful for...

• Linux. Any OS not subject to CVE-2020-0601 (which is equivalent to "any OS except Windows"). Linux just happens to be the one I'm using.
• Automatic updates.
• Our furry antidepressants.
• My family (specifically including my kids as well as the entire Rainbow Caravan).
• Not having snowed as much as had been predicted.

Finding little to be thankful for in either government or the environment right now. Sorry.

Patch your Windows 10 boxes.

If your Windows 10 boxes -- all of them, both desktops and servers, didn't apply the update that came out Tuesday, go do that now. You can chase the references below while the update is downloading.

Here's what Microsoft said about it when they released the patch. There are more details in the resource list below. Some of those go on to link to proof-of-concept exploits. Good luck!

h/t to @thnidu.

Resources

• NVD - CVE-2020-0601
• Windows 10 Has a Security Flaw So Severe the NSA Disclosed It | WIRED
• CVE-2020-0601 | Windows CryptoAPI Spoofing Vulnerability
• January 2020 Security Updates: CVE-2020-0601 - Microsoft Security Response Center
• CVE-2020-0601: a critical Windows vulnerability discovered by…NSA!

Another fine post from The Computer Curmudgeon (also at computer-curmudgeon.com).
Donation buttons in profile.