The violation was discovered in early January and attributed to Chinese cyber spies targeting US think tanks. At the end of February, five days before Microsoft Corp. Issued a patch on March 2, there was an explosion of infiltrations from other intruders relying on the initial injury.
The White House described the hack earlier this month as an “active threat” that was addressed by senior national security officials. The government’s response is led by Assistant National Security Advisor Anne Neuberger, who has called government officials and private sector experts on brainstorming solutions, especially given the fact that smaller businesses often lack the resources to counter cyberattacks and clean up after hacks.
Since the tool was released, the number of vulnerable systems has dropped from at least 120,000 at its peak to less than 10,000.
While Microsoft has made significant efforts as a provider of software that elite hackers have exploited, Charles Carmakal is senior vice president and chief technical officer of celebrities Cyber security firm FireEyeMicrosoft, based in Redmond, Washington, deserves credit for working hard to help the people who run its software defend themselves.
He specifically cited the downloadable turnkey script that allows users to apply patches and determine if their systems have been compromised.
“The efforts they are making to help companies defend themselves are great,” he said. “It is a difficult situation that organizations face the vulnerability in general.”