Technology - Google News

New cyber vulnerability poses 'severe risk,' DHS says - ABC News
Before you download Windows 11, make sure you do these 2 things - CNET
Android glitch could block 911 calls from going through. Here’s how to fix it - WOODTV.com

New cyber vulnerability poses 'severe risk,' DHS says - ABC News

Posted: 12 Dec 2021 05:50 PM PST

The vulnerability is linked to a commonly used piece of software called Log4j.

December 13, 2021, 1:47 AM

4 min read

Late Saturday, the Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent statement about a new cyber vulnerability that could touch a wide swath of the internet.

"This vulnerability, which is being widely exploited by a growing set of threat actors, presents an urgent challenge to network defenders given its broad use," CISA Director Jen Easterly said in a statement.

"To be clear, this vulnerability poses a severe risk," Easterly said.

The vulnerability is linked to a commonly used piece of software called Log4j, a utility that runs in the background of many commonly used software applications.

"It's probably one of the most ubiquitous software components on the internet today," Tony Turner, VP of Security Solutions for the cyber-security company Fortress, told ABC News. Turner said the vulnerability impacts everything from gaming systems and consumer platforms to critical infrastructure and the Department of Defense.

"Why this is so important is it is trivial to exploit," Turner said. "Anyone can do this, like teenagers and kids are playing around with this [vulnerability] like it's a game."

Cybersecurity experts inside and outside the government have been working around the clock this weekend to try to get their arms around this problem. "IT security teams around the world have been burning midnight oil all weekend and will continue and this is not a weekend problem, this is a months and months from now problem," Turner said.

Microsoft issued an alert saying the software giant is "monitoring the threat landscape for attacks and developing customer protections."

"Our security teams have been conducting an active investigation of our products and services to understand where Apache Log4j may be used and are taking expedited steps to mitigate any instances," an alert from Microsoft said.

An Amazon Web Services blog post said, "This vulnerability is severe and due to the widespread adoption of Apache Log4j, its impact is large."

Rob Joyce, who serves as the National Security Agency's director of cybersecurity, said in a tweet the Log4j vulnerability is a "significant threat for exploitation due to the widespread inclusion in software frameworks."

Other countries have also warned of the software vulnerability. Germany said it is a "very high" threat.

Sources say it may be weeks before the vulnerability -- and how it has been exploited -- is better understood.

The problem is that Log4j is widely used and touches large swaths of the internet -- from cell phones to e-commerce to gaming platforms to internet connected devices in homes and offices.

"I think this is bigger than SolarWinds, it's bigger than Colonial [pipeline] or Kaseya. That's just because of the reach just because of the ubiquitous nature and the ease of exploitation here," Turner told ABC News.

"This is probably one of the most important vulnerabilities of all time… we're still trying to understand the ultimate reach of this and I think we're going to be unpacking this for years to come," Turner said.

Adblock test (Why?)

Before you download Windows 11, make sure you do these 2 things - CNET

Posted: 11 Dec 2021 03:00 AM PST

Windows 11 update on a laptop — You'll need to take two extra steps before you can download Windows 11.
Sarah Tew/CNET

Windows 11 began rolling out in October and brings a new, more streamlined design and updated features, including support for Android apps, easy toggling between multiple virtual desktops and better multitasking. Microsoft included a few Mac-like features and the ability to run Android apps on Windows 11.

Now playing: Watch this: Windows 11: Will your computer be able to run it? What...

3:43

But there are a few catches to downloading the new operating system. For starters, Microsoft is using a phased rollout for Windows 11. And before you download, you'll need a Wi-Fi connection and a Windows 11 Home account. Fortunately, Windows 10 users can upgrade for free (here's how to get Windows 10 first so you can download Windows 11). But if you're setting up a Windows 11 Home account -- which most people using it on a personal device will be -- there are a few extra steps you'll have to take before accessing the new features.

We'll break down everything you need to know before downloading Windows 11, including how to check if your computer is compatible to make sure you meet the new requirements. And here's what to know if you're thinking of upgrading from Windows 10 to Windows 11 Home. This story was recently updated.

Create a Microsoft account (or sign in to yours)

To set up Windows 11 Home, you'll need a Microsoft account, which gives you access to Microsoft products and services. Don't worry -- it's free to create one.

In the past, it was possible to opt out of creating a Microsoft account and use a local one instead (though the process wasn't intuitive). It appears that with Windows 11, you will need to create a Microsoft account to get started. After that point, you can delete your Microsoft account and sign in with a local account if you'd like, and this won't impact how you use the OS -- but you won't be able to sync content across multiple devices. A Microsoft account also allows easier transferring from your old PC to a new one, and more options for signing in.

Windows 11 Pro and the version built for enterprise use will not require people to sign in to Microsoft accounts.

Here's how to create a free Microsoft account as Windows 11 rolls out:

1. Go to account.microsoft.com, and click Sign in.

2. Tap Create one to make a new account. (If you already have an account, you can sign in here.)

3. Enter your email address. Or, if you'd rather create a new email address through Microsoft (which will appear as @outlook.com), click Get a new email address, enter what you'd like, and click Next.

4. Create a password, and click Next.

5. Enter your country/region and date of birth, and click Next.

6. Check your email for a verification code, and click Next.

Connect to the internet

To download Windows 11 Home (and to create a Microsoft account), you'll also need to be connected to the internet. The reason for this is that Windows 11 will primarily be delivered as a Windows Update, much like newer versions of Windows 10 have been.

You'll also need the internet to perform future updates and to take advantage of some of the new Windows 11 features, according to Microsoft.

This requirement may pose a problem for those who lack easy internet access. However, after you connect for the initial setup, you don't have to connect again if you don't want to (though you should to get important security updates that prevent vulnerabilities).

If you're downloading Windows 11 on your current computer, just make sure you're connected to the internet before you start the process. If you buy a new Windows 11 computer after the OS is generally released, you should be prompted to connect to the internet when you're setting it up.

For more, check out how Windows 11 compares with Windows 10, everything to know about making the upgrade from Windows 10 to Windows 11 and all the Windows 11 features we wanted but didn't get.