15/01/2020
This is a quick warning to let you know that, if you own a computer running Windows 10, you need to update it as soon as possible. A critical security flaw has just been discovered that may allow malicious actors to remotely run malware and viruses on your computer at any time, and prevent you from being able to patch it.
The exploit may also render SSL, which is the encryption that protects HTTPS connections, useless, potentially exposing private information like your banking details to malicious attackers.
Microsoft has already published a security update that fixes the issue, but you need to update your computer in order to receive the update. To do this, go to Settings, then Update & Security, then Windows Update, and install all available updates that you find there.
As long as you update your computer, you will be safe from this exploit - but you need to do so soon, as the exploit may be able to prevent you from receiving the security update in the future if your PC becomes affected.
If you need assistance with installing the update, we are temporarily offering to remotely control your PC and install the update for you free of charge for the next week or two. Please contact us if you need this assistance. However, if you are able to do it yourself, please do, as we will likely be under higher-than-usual demand due to offering this.
The NSA has released a report:https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF
Microsoft has released a security advisory: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
And the exploit is listed in the National Vulnerability Database: https://nvd.nist.gov/vuln/detail/CVE-2020-0601
